Overview

URL trkur1.com/276328/19267
IP67.228.247.11
ASNAS36351 SoftLayer Technologies Inc.
Location United States
Report completed2019-03-03 02:00:11 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-03 2 trkur1.com/276328/19267 Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 67.228.247.11

Date UQ / IDS / BL URL IP
2019-06-18 17:24:36 +0200
0 - 0 - 0 digitalproducts.xyz 67.228.247.11
2019-05-30 23:41:01 +0200
0 - 0 - 1 trkur1.com/360316/40031 67.228.247.11
2019-04-10 13:38:26 +0200
0 - 0 - 1 trkur1.com/190663/42639 67.228.247.11
2019-03-30 20:38:04 +0100
0 - 0 - 1 trkur1.com/182688/42964 67.228.247.11
2019-03-05 20:00:29 +0100
0 - 0 - 1 trkur1.com/96217/40291 67.228.247.11
2019-02-16 05:19:44 +0100
0 - 0 - 1 trkur1.com/331694/43091 67.228.247.11
2018-12-10 17:14:57 +0100
0 - 0 - 0 trkur4.com 67.228.247.11
2018-11-05 17:52:19 +0100
0 - 0 - 1 trkur1.com/156729/39908 67.228.247.11
2018-08-20 09:47:51 +0200
0 - 0 - 1 trkur1.com/304092/34922 67.228.247.11
2018-06-04 05:33:46 +0200
0 - 3 - 0 bunnytummy.com/ 67.228.247.11

Last 10 reports on ASN: AS36351 SoftLayer Technologies Inc.

Date UQ / IDS / BL URL IP
2019-07-01 07:04:06 +0200
0 - 0 - 0 freepaypalmoney.micro.blog/ 104.200.22.214
2019-06-30 01:23:43 +0200
0 - 0 - 0 lasvegasrealtyllc.com/agyuslvf/evps3b0s7oc 173.193.64.139
2019-06-30 01:01:37 +0200
0 - 0 - 0 openx.org 208.43.79.58
2019-06-30 00:55:43 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:52:05 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:43:05 +0200
0 - 1 - 0 p237431.cdaz.icu/bati/sa?cid=TOTALSPORTEK_ADB (...) 108.168.193.185
2019-06-30 00:40:37 +0200
0 - 0 - 0 https://www.mg-webs.com/ 198.252.100.133
2019-06-30 00:31:20 +0200
0 - 0 - 0 https://rumble.com/v7vfkx-abc.watchmarvels-ag (...) 169.50.62.153
2019-06-30 00:30:00 +0200
0 - 0 - 0 https://rumble.com/v7vfot-putlockerwatch-marv (...) 169.50.62.153
2019-06-27 17:16:37 +0200
0 - 0 - 0 spiritenv.com 75.126.220.28

Last 10 reports on domain: trkur1.com

Date UQ / IDS / BL URL IP
2019-06-04 20:52:29 +0200
0 - 0 - 1 trkur1.com/411973/42687 67.228.247.13
2019-05-30 23:41:01 +0200
0 - 0 - 1 trkur1.com/360316/40031 67.228.247.11
2019-05-19 03:24:40 +0200
0 - 0 - 1 trkur1.com/394282/43748 67.228.247.10
2019-04-24 02:57:51 +0200
0 - 0 - 1 trkur1.com/400998/31040 67.228.247.10
2019-04-22 11:40:22 +0200
0 - 0 - 1 trkur1.com/52634/43477 67.228.247.10
2019-04-10 13:38:26 +0200
0 - 0 - 1 trkur1.com/190663/42639 67.228.247.11
2019-04-04 22:11:16 +0200
0 - 0 - 1 trkur1.com/287163/41416 67.228.247.10
2019-03-30 20:38:04 +0100
0 - 0 - 1 trkur1.com/182688/42964 67.228.247.11
2019-03-22 23:33:46 +0100
0 - 0 - 1 trkur1.com/382952/36899 67.228.247.10
2019-03-20 12:16:26 +0100
0 - 0 - 1 trkur1.com/182688/42963 67.228.247.13


JavaScript

Executed Scripts (24)


Executed Evals (0)


Executed Writes (7)

#1 JavaScript::Write (size: 20, repeated: 1) - SHA256: 74be005fdbb3cbf585b0551083bb12afff9721726ba9d422b5406376f8b239bd

                                        < a href = "undefined" >
                                    

#2 JavaScript::Write (size: 238, repeated: 1) - SHA256: 880ad6b59a631e0401ef5a37334714ee4beb0445a118cca6e9db6664f04e4698

                                        < img src = "./choose_files/imgs/set/undefined/age/undefined_age.png"
onmouseover = "this.src='./choose_files/imgs/set/' + set + '/age/' +lg+'_age_over.png'"
onmouseout = "this.src='./choose_files/imgs/set/' + set + '/age/' +lg+'_age.png'" / >
                                    

#3 JavaScript::Write (size: 193, repeated: 1) - SHA256: 2dbc27ce03ea7da9905e5359f5d432de9ab87ab75a616308f6717ccba0317b64

                                        < img src = "choose_files/imgs/btn/undefined_female.png"
onmouseover = "this.src='choose_files/imgs/btn/'+lg+'_female_over.png'"
onmouseout = "this.src='choose_files/imgs/btn/'+lg+'_female.png'" / >
                                    

#4 JavaScript::Write (size: 187, repeated: 1) - SHA256: ff9371a3956e6570c27366d7c4d7afedde822b414b1cb78724100b1ef1e0b3c9

                                        < img src = "choose_files/imgs/btn/undefined_male.png"
onmouseover = "this.src='choose_files/imgs/btn/'+lg+'_male_over.png'"
onmouseout = "this.src='choose_files/imgs/btn/'+lg+'_male.png'" / >
                                    

#5 JavaScript::Write (size: 49, repeated: 1) - SHA256: 78b0105ec0d4b0fb2299e1f3df05f7cad8affa32c2fdac28f8eb73e466130bfa

                                        < img src = "choose_files/imgs/title/undefined.png" >
                                    

#6 JavaScript::Write (size: 50, repeated: 1) - SHA256: e3a7915ded08bd910e01d22d268fa326403dfde147ddd4fc764f82f7e445b575

                                        < img src = "choose_files/imgs/title/undefined1.png" >
                                    

#7 JavaScript::Write (size: 50, repeated: 1) - SHA256: 9e4f195abb9fdbf65651059678f8e0ad3f71710e646172aa7448f7fda4d2b6b5

                                        < img src = "choose_files/imgs/title/undefined2.png" >
                                    


HTTP Transactions (58)


Request Response
                                        
                                            GET /276328/19267 HTTP/1.1 
Host: trkur1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.228.247.13
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
X-Powered-By: PHP/5.3.27
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: http://trkzur.com/?v=4&reason=country&rand=
Content-Length: 0
Date: Sun, 03 Mar 2019 00:59:37 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: close


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /?v=4&reason=country&rand= HTTP/1.1 
Host: trkzur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.205.136.74
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.10.3 (Ubuntu)
Date: Sun, 03 Mar 2019 00:59:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   164
Md5:    5c9004e7d0a759a992046b700f73983c
Sha1:   637e9627e27378c0e50d593dfcb066d47dc7e051
Sha256: bddb35d5eef960bf06269a97fac88b1ccb0da7b15503ffd628c6d24b4e1baf54
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: trkzur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.205.136.74
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.10.3 (Ubuntu)
Date: Sun, 03 Mar 2019 00:59:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   141
Md5:    a94321d1b68ed4ff115bac45d32c57a6
Sha1:   8a8a1a624f9f0f45d08f99200997cb75ebd0d323
Sha256: d61af8da5501b4b8085bbc73121eca98a83b18d57017280dfbddc5ded4c3ce72
                                        
                                            GET /ck.php?line_item_id=17530&subid_spx=&clickid=444683733 HTTP/1.1 
Host: tr4ck.brucelead.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         109.123.118.67
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sun, 03 Mar 2019 0:59:37 GMT
Server: SpirooxPerformance-Server-1.0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Content-Length: 1170
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: session=20190303_9e188b40-3d4f-11e9-a3e5-afcd851b2aae%7C4011754987407570%7C2019-03-03T00%3A59%3A37%2B0000%7C3144096%7CNorway%7C17530%7C%7C444683733%7C6673%7C4%7C4660%7C17530%7C2%7C4445%7C0%7C12657%7C10976%7C18583%7C3966%7C0%7C0%7C3%7C1%7CWindows%7C3%7C%7C%7CFirefox%7CPowerTech+Information+Systems+AS%7CWIFI%7C77.40.129.0%2F24%7C77.40.129.123%7C0%7C%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cen-us%2Cen%3Bq%3D0.5%7C0.0%7C0.0%7C0.0%7C0.0%7C0%7C%7C1551574777563%7C%7Cfalse%7Cfalse%7C54%7C0%7C51%7C%7C0%7C0%7C%7Ctr4ck.brucelead.com%7Cno%7C%7C0.0%7C; domain=tr4ck.brucelead.com; path=/; expires=Mon, 01 Apr 2019 0:59:37 GMT


--- Additional Info ---
Magic:  HTML document text
Size:   1170
Md5:    2bc6a40be4aa476171df0a8879171f12
Sha1:   8ccbfe85a5a27cf7d6f6b065e49b5b66d1a78511
Sha256: cb0878ea45bf8cdaa659fc9d09ede197bacdba9b3bf7601d68eef8b78362fce5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 27 Feb 2019 01:44:24 GMT
Etag: 934FEAC9A6298E9D013BC37CE98FCB0B4E8C3584
X-OCSP-Responder-ID: mcdpcaocsp8
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=2071
Expires: Sun, 03 Mar 2019 01:34:09 GMT
Date: Sun, 03 Mar 2019 00:59:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    44e63c08cd66db55e45acf6989c7e6db
Sha1:   934feac9a6298e9d013bc37ce98fcb0b4e8c3584
Sha256: 0ab5a9b3a787b1a9439b0e05a723c207cf1d65549dee354b46591273cd18429e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Feb 2019 10:59:25 GMT
Etag: 33BAE214296055ECB5DDF8EB48F410457402BCFE
X-OCSP-Responder-ID: mcdpcaocsp1
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=208237
Expires: Tue, 05 Mar 2019 10:50:15 GMT
Date: Sun, 03 Mar 2019 00:59:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    820a310803fa15c3597737c731437a51
Sha1:   33bae214296055ecb5ddf8eb48f410457402bcfe
Sha256: fc68b2b9c508fd7bc851e480b7cee86c86c1c615679a439f3d3f3cfe173f1c90
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Feb 2019 10:59:25 GMT
Etag: F2EC3E6CEAAFAE2ADD792E778BA23533A92BDE8C
X-OCSP-Responder-ID: mcdpcaocsp1
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=208152
Expires: Tue, 05 Mar 2019 10:48:50 GMT
Date: Sun, 03 Mar 2019 00:59:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fe09ed5d80e86ecd4a45e8a5a0db3d68
Sha1:   f2ec3e6ceaafae2add792e778ba23533a92bde8c
Sha256: 584098ea2e2670361deffb45aa545da63ebb347daeec461e6d7981cfd741f1c3
                                        
                                            GET /dep.php?pid=4505&format=POPUP&subid=Uzo0NjYwLFNCOixMOjE3NTMwLEM6MTg1ODM%3D&cid=20190303_9e188b40-3d4f-11e9-a3e5-afcd851b2aae HTTP/1.1 
Host: qpxrg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tr4ck.brucelead.com/ck.php?line_item_id=17530&subid_spx=&clickid=444683733

                                         
                                         23.20.51.186
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, must-revalidate
Date: Sun, 03 Mar 2019 00:59:38 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://svkrg.com/fep.php?rd=wb.perfonsrv.com&ct=6&id=15515747783287261541001499&tid=4505&t=imp&end=1
Server: nginx
Set-Cookie: uuid=15515747781523793351836502; expires=Tue, 02-Apr-2019 00:59:38 GMT; Max-Age=2592000
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 01 Mar 2019 21:47:14 GMT
Etag: E304D121F71734279D69E1105EB02C7773CFCDD5
X-OCSP-Responder-ID: mcdpcaocsp8
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=247024
Expires: Tue, 05 Mar 2019 21:36:42 GMT
Date: Sun, 03 Mar 2019 00:59:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    58fc5ee03e23cc4a3ce7cff41d78a0c3
Sha1:   e304d121f71734279d69e1105eb02c7773cfcdd5
Sha256: 0f1ec0c2fb5b9fc320e3a4ad87ead1c0e082db14ab1539987006b2252494dff3
                                        
                                            GET /fep.php?rd=wb.perfonsrv.com&ct=6&id=15515747783287261541001499&tid=4505&t=imp&end=1 HTTP/1.1 
Host: svkrg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tr4ck.brucelead.com/ck.php?line_item_id=17530&subid_spx=&clickid=444683733

                                         
                                         34.234.169.82
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Date: Sun, 03 Mar 2019 00:59:38 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Server: nginx
Content-Length: 2924
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2924
Md5:    a3de357720e7ddf61954404ef6e4d60f
Sha1:   193a4d9387a8e80c976b4ca0a75dd3485c3af603
Sha256: f23105d5237d680b936f0b1647debd007512b42ebd2ecb3058375d54902d969b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: svkrg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         34.234.169.82
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Accept-Ranges: bytes
Date: Sun, 03 Mar 2019 00:59:39 GMT
Etag: "5c7ae27b-0"
Last-Modified: Sat, 02 Mar 2019 20:07:23 GMT
Server: nginx
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 27 Feb 2019 12:01:28 GMT
Etag: CF2C63DAE41E06E52CA24048CC0B3B8924C2EDBA
X-OCSP-Responder-ID: mcdpcaocsp4
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=298334
Expires: Wed, 06 Mar 2019 11:51:53 GMT
Date: Sun, 03 Mar 2019 00:59:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    311d25dfeee84363aac095df5fa9a16d
Sha1:   cf2c63dae41e06e52ca24048cc0b3b8924c2edba
Sha256: b11757032a3060229f9ba8cf3912c7c73aebeb587c246a9bc606ee98408d4352
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Feb 2019 10:59:25 GMT
Etag: 3358070C011B93CE7CE3754FDF0B6242FFEDF461
X-OCSP-Responder-ID: mcdpcaocsp16
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=208159
Expires: Tue, 05 Mar 2019 10:48:58 GMT
Date: Sun, 03 Mar 2019 00:59:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    d53fe268e6f3909de5589ffdc4a94b12
Sha1:   3358070c011b93ce7ce3754fdf0b6242ffedf461
Sha256: 9c5bec838e62f18b29c08347c39dec3ddbf2b58a0f5200c7f45c077b620ba7df
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Feb 2019 10:59:25 GMT
Etag: F2F3885BCDFACAC31F888A8705E15236D7083CEB
X-OCSP-Responder-ID: mcdpcaocsp1
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=208165
Expires: Tue, 05 Mar 2019 10:49:04 GMT
Date: Sun, 03 Mar 2019 00:59:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    53d9e654da7fa7ec136e3b00c9a38eea
Sha1:   f2f3885bcdfacac31f888a8705e15236d7083ceb
Sha256: 4b1c00c30733ce9791e1ae685809cbb04621fc52df06a3fd9d52445a57c28b1e
                                        
                                            GET /?&version=1&id=15515747783287261541001499&tid=4505&ct=6&t=imp&ftype=js&filter=1&nf=14&nf2=15&trs=15515747786389977&end=1&fwidth=1176&fheight=754&fiframe=false&fiframesandbox=&rfp= HTTP/1.1 
Host: wb.perfonsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://svkrg.com/fep.php?rd=wb.perfonsrv.com&ct=6&id=15515747783287261541001499&tid=4505&t=imp&end=1

                                         
                                         34.192.141.121
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 03 Mar 2019 00:59:40 GMT
Location: https://adexchangegate.com/script/s2iurl.php?csid=1575873&s1=4505&md=1&stamat=m|,,w3Z_YiOyoGU3BZ9GH0dEdHP3xP.68a,nnYyRct5UZL8K6y64ILbpADkretDPhizvxhBU2P15hcl0X9k5yFrJ1RWax30CXjP4cVzgZhMvWKzRujTj_aBJlFmeQ_tJAPgEzkYNBX_apYHqqDj83Prg9bzbi_uGRILmFnpblPoGAYdG31wcD782UJ7MpljPHh-WSeea8DUlhJP6NDulSbRYrQPymljjeBQO0SOu6Q_kYVsCgvW6doqnM7cYrC7UE4GA02Cw1Sq28W4aEI9vL19LHGM7OOiHlP-IMM4CU6Ow5Rz56SuI_yTgUPEXcMEcQQEGNHuRbo4ZwZe4PgjweCuQxukCpiV1ObHMK1eUkch9u_LqXMHj9vw0UXR_fSoMIgF-Y53lNFqBkdkX19LimEJ5yOEEtKnntqpHjzIpHE0YmCVUPv5BREwkK5EfEvsEhLds4Uxsckba9b0zv1lRq0d-LMmo0tm_VNMaFWudXrzNCinXteNLcdCLA,,
Server: nginx
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 01 Mar 2019 15:44:59 GMT
Etag: 4B514CC292203583AE515CCCCCEF0CC01EF481B4
X-OCSP-Responder-ID: mcdpcaocsp8
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=484461
Expires: Fri, 08 Mar 2019 15:34:01 GMT
Date: Sun, 03 Mar 2019 00:59:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    3b28d71d2ce003bfe171ac58d3f07a9f
Sha1:   4b514cc292203583ae515cccccef0cc01ef481b4
Sha256: 8816d1182adb13047617c489c57c94db772dca699b195ed3c69ac9b3bd3a2435
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: tr4ck.brucelead.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: session=20190303_9e188b40-3d4f-11e9-a3e5-afcd851b2aae%7C4011754987407570%7C2019-03-03T00%3A59%3A37%2B0000%7C3144096%7CNorway%7C17530%7C%7C444683733%7C6673%7C4%7C4660%7C17530%7C2%7C4445%7C0%7C12657%7C10976%7C18583%7C3966%7C0%7C0%7C3%7C1%7CWindows%7C3%7C%7C%7CFirefox%7CPowerTech+Information+Systems+AS%7CWIFI%7C77.40.129.0%2F24%7C77.40.129.123%7C0%7C%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cen-us%2Cen%3Bq%3D0.5%7C0.0%7C0.0%7C0.0%7C0.0%7C0%7C%7C1551574777563%7C%7Cfalse%7Cfalse%7C54%7C0%7C51%7C%7C0%7C0%7C%7Ctr4ck.brucelead.com%7Cno%7C%7C0.0%7C; c18583=1; l17530=1

                                         
                                         109.123.118.67
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Cache-Control: public, max-age=86400
Expires: Sun, 03 Mar 2019 0:59:40 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /script/s2iurl.php?csid=1575873&s1=4505&md=1&stamat=m|,,w3Z_YiOyoGU3BZ9GH0dEdHP3xP.68a,nnYyRct5UZL8K6y64ILbpADkretDPhizvxhBU2P15hcl0X9k5yFrJ1RWax30CXjP4cVzgZhMvWKzRujTj_aBJlFmeQ_tJAPgEzkYNBX_apYHqqDj83Prg9bzbi_uGRILmFnpblPoGAYdG31wcD782UJ7MpljPHh-WSeea8DUlhJP6NDulSbRYrQPymljjeBQO0SOu6Q_kYVsCgvW6doqnM7cYrC7UE4GA02Cw1Sq28W4aEI9vL19LHGM7OOiHlP-IMM4CU6Ow5Rz56SuI_yTgUPEXcMEcQQEGNHuRbo4ZwZe4PgjweCuQxukCpiV1ObHMK1eUkch9u_LqXMHj9vw0UXR_fSoMIgF-Y53lNFqBkdkX19LimEJ5yOEEtKnntqpHjzIpHE0YmCVUPv5BREwkK5EfEvsEhLds4Uxsckba9b0zv1lRq0d-LMmo0tm_VNMaFWudXrzNCinXteNLcdCLA,, HTTP/1.1 
Host: adexchangegate.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://svkrg.com/fep.php?rd=wb.perfonsrv.com&ct=6&id=15515747783287261541001499&tid=4505&t=imp&end=1

                                         
                                         35.190.9.171
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8; charset=utf-8
                                        
Server: openresty
Date: Sun, 03 Mar 2019 00:59:40 GMT
Referrer-Policy: no-referrer
Link: <//adexchangegate.com>; rel=dns-prefetch,<//adexchangegate.com>; rel=preconnect
Content-Encoding: gzip
Via: 1.1 google
Alt-Svc: clear
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1835
Md5:    40737974740ed2ee37101b86cb68e21f
Sha1:   c9dab1dc2ece28eff5aa7458b94ea53eecae31a9
Sha256: fb91f9b337c9d06300fb23ce529c018aea4b9b777fcd39ded64a1f4224911ee2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: trkzur.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.205.136.74
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.10.3 (Ubuntu)
Date: Sun, 03 Mar 2019 00:59:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   141
Md5:    a94321d1b68ed4ff115bac45d32c57a6
Sha1:   8a8a1a624f9f0f45d08f99200997cb75ebd0d323
Sha256: d61af8da5501b4b8085bbc73121eca98a83b18d57017280dfbddc5ded4c3ce72
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: adexchangegate.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.190.9.171
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: openresty
Date: Sun, 03 Mar 2019 00:59:40 GMT
Content-Length: 0
Last-Modified: Wed, 17 Jan 2018 13:01:12 GMT
Etag: "5a5f4918-0"
Accept-Ranges: bytes
Via: 1.1 google
Alt-Svc: clear


--- Additional Info ---
                                        
                                            GET /script/s2iurl.php?csid=1575873&s1=4505&md=1&stamat=m|,,w3Z_YiOyoGU3BZ9GH0dEdHP3xP.68a,nnYyRct5UZL8K6y64ILbpADkretDPhizvxhBU2P15hcl0X9k5yFrJ1RWax30CXjP4cVzgZhMvWKzRujTj_aBJlFmeQ_tJAPgEzkYNBX_apYHqqDj83Prg9bzbi_uGRILmFnpblPoGAYdG31wcD782UJ7MpljPHh-WSeea8DUlhJP6NDulSbRYrQPymljjeBQO0SOu6Q_kYVsCgvW6doqnM7cYrC7UE4GA02Cw1Sq28W4aEI9vL19LHGM7OOiHlP-IMM4CU6Ow5Rz56SuI_yTgUPEXcMEcQQEGNHuRbo4ZwZe4PgjweCuQxukCpiV1ObHMK1eUkch9u_LqXMHj9vw0UXR_fSoMIgF-Y53lNFqBkdkX19LimEJ5yOEEtKnntqpHjzIpHE0YmCVUPv5BREwkK5EfEvsEhLds4Uxsckba9b0zv1lRq0d-LMmo0tm_VNMaFWudXrzNCinXteNLcdCLA,,&treqn=1368893575&rpn=1&cbrandom=0.1638033522514315&cbtitle=&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fsvkrg.com%2Ffep.php%3Frd%3Dwb.perfonsrv.com%26ct%3D6%26id%3D15515747783287261541001499%26tid%3D4505%26t%3Dimp%26end%3D1 HTTP/1.1 
Host: adexchangegate.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adexchangegate.com/script/s2iurl.php?csid=1575873&s1=4505&md=1&stamat=m|,,w3Z_YiOyoGU3BZ9GH0dEdHP3xP.68a,nnYyRct5UZL8K6y64ILbpADkretDPhizvxhBU2P15hcl0X9k5yFrJ1RWax30CXjP4cVzgZhMvWKzRujTj_aBJlFmeQ_tJAPgEzkYNBX_apYHqqDj83Prg9bzbi_uGRILmFnpblPoGAYdG31wcD782UJ7MpljPHh-WSeea8DUlhJP6NDulSbRYrQPymljjeBQO0SOu6Q_kYVsCgvW6doqnM7cYrC7UE4GA02Cw1Sq28W4aEI9vL19LHGM7OOiHlP-IMM4CU6Ow5Rz56SuI_yTgUPEXcMEcQQEGNHuRbo4ZwZe4PgjweCuQxukCpiV1ObHMK1eUkch9u_LqXMHj9vw0UXR_fSoMIgF-Y53lNFqBkdkX19LimEJ5yOEEtKnntqpHjzIpHE0YmCVUPv5BREwkK5EfEvsEhLds4Uxsckba9b0zv1lRq0d-LMmo0tm_VNMaFWudXrzNCinXteNLcdCLA,,

                                         
                                         35.190.9.171
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Sun, 03 Mar 2019 00:59:40 GMT
Transfer-Encoding: chunked
Location: https://offaces-butional.com/732c7c49-9dec-4cab-94b1-318c3e6e247d?zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Referrer-Policy: no-referrer
Via: 1.1 google
Alt-Svc: clear


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 28 Feb 2019 20:19:35 GMT
Etag: AE8F7979EF84E7808FDCFC6DEE257CDB71EDB9C5
X-OCSP-Responder-ID: mcdpcaocsp16
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=155438
Expires: Mon, 04 Mar 2019 20:10:18 GMT
Date: Sun, 03 Mar 2019 00:59:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7b3e68d68bcc217a1fd4c5c678e75c6a
Sha1:   ae8f7979ef84e7808fdcfc6dee257cdb71edb9c5
Sha256: 6df329fbd907dad1dd384351cd341ba3cedda4dfe2d4e59cab4e5c83ac7217a2
                                        
                                            GET /732c7c49-9dec-4cab-94b1-318c3e6e247d?zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566 HTTP/1.1 
Host: offaces-butional.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://adexchangegate.com/script/s2iurl.php?csid=1575873&s1=4505&md=1&stamat=m|,,w3Z_YiOyoGU3BZ9GH0dEdHP3xP.68a,nnYyRct5UZL8K6y64ILbpADkretDPhizvxhBU2P15hcl0X9k5yFrJ1RWax30CXjP4cVzgZhMvWKzRujTj_aBJlFmeQ_tJAPgEzkYNBX_apYHqqDj83Prg9bzbi_uGRILmFnpblPoGAYdG31wcD782UJ7MpljPHh-WSeea8DUlhJP6NDulSbRYrQPymljjeBQO0SOu6Q_kYVsCgvW6doqnM7cYrC7UE4GA02Cw1Sq28W4aEI9vL19LHGM7OOiHlP-IMM4CU6Ow5Rz56SuI_yTgUPEXcMEcQQEGNHuRbo4ZwZe4PgjweCuQxukCpiV1ObHMK1eUkch9u_LqXMHj9vw0UXR_fSoMIgF-Y53lNFqBkdkX19LimEJ5yOEEtKnntqpHjzIpHE0YmCVUPv5BREwkK5EfEvsEhLds4Uxsckba9b0zv1lRq0d-LMmo0tm_VNMaFWudXrzNCinXteNLcdCLA,,

                                         
                                         52.28.12.46
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 03 Mar 2019 00:59:40 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Pragma: no-cache
Set-Cookie: 732c7c49-9dec-4cab-94b1-318c3e6e247d-v4=732c7c49-9dec-4cab-94b1-318c3e6e247d;domain=offaces-butional.com;path=/;HttpOnly cep-v4=70JP3NyhiIo-BGVLX_YB4C_2HaDh9WOlY19OWMu8hoF7pJK7oEtRFXD4il_iiUvBfWxiKqaoRv8nTADBoMkA3SrdU3Admft9v-0bI2sIx77S-h6yyynJHmUHQcOXziotuEYlXZZCqYNBfZAMW38B7BFQBnfv9WGn4l83RxP7jgHUC95ex0CHMCUwQdzWX_vyzavFZZngGrE7QFLc8V780iE4wI_0ehFOmKjdciz25N0YRaPx9GxNpErZoUkqd9hxt17Sjcb2acys-YKIBYrJopLyiHNcq3zdcNbonoZjyG8DUu2-_7LUOnlN4reVOGuC;Max-Age=86400;Expires=Mon, 04-Mar-2019 00:59:40 GMT;domain=offaces-butional.com;path=/;HttpOnly


--- Additional Info ---
                                        
                                            GET /rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566 HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781; expires=Mon, 02-Mar-20 00:59:41 GMT; path=/; domain=.rpgmasterleague.com; HttpOnly
Cache-Control: max-age=86400
Last-Modified: Wed, 19 Dec 2018 15:57:19 GMT
Access-Control-Allow-Origin: *
X-HW: 1551574781.dop015.sk1.t,1551574781.cds006.sk1.c
Server: cloudflare
CF-RAY: 4b17ab4d4b44b617-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33607
Md5:    d2221667c83edf4e33af3179c09a806c
Sha1:   33de01991240def14df89f54decdacfcfc30267a
Sha256: 9b650385ceaf2940e66a47f02fb2e559c6f8896d95bb586611d1b7547392d6ae
                                        
                                            GET /js/push/push.js HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 1212
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Fri, 08 Feb 2019 19:54:47 GMT
Access-Control-Allow-Origin: *
Etag: W/"5c5dde87-aba"
X-HW: 1549730384.dop002.sk1.t,1549730384.cds048.sk1.c
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab4dd93cb635-TLL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1212
Md5:    dd4332332ca2a66219a24ea4a1539f3c
Sha1:   82c950fe75451f50b3f60916e4a0eec82e2f5bd9
Sha256: e61b50672e8874dd7782f32a7d2762205f4f16b16e13cf24a21bd4dea737ed80
                                        
                                            GET /rpggame_0001/02/choose_files/code/js/ion.js HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 3215
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
X-HW: 1548650487.dop001.sk1.t,1548650487.cds040.sk1.p
Access-Control-Allow-Origin: *
Etag: W/"5b3e6415-323c"
Last-Modified: Thu, 05 Jul 2018 18:31:49 GMT
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab4ddb71b617-TLL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3215
Md5:    46174c0fe08b576b674a8c20959f298b
Sha1:   cae65ef96747681cd0f597f7c1fa1627856242aa
Sha256: d10570e4b0f8f07fd96032088f43266a1b405f0645dd3f6d60abaea03de57675
                                        
                                            GET /rpggame_0001/02/choose_files/code/css/main.css HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 4077
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
Last-Modified: Fri, 23 Nov 2018 20:18:16 GMT
Access-Control-Allow-Origin: *
Etag: W/"5bf86088-4666"
X-HW: 1549592419.dop012.sk1.t,1549592419.cds015.sk1.c
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab4ddc7cb61d-TLL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4077
Md5:    c34d62877958f4c710201c1516748014
Sha1:   8abdc130320d340ec52671575fe732dae350cfcb
Sha256: c5f27fbd116a4a284bc28fef581a7a233babda2e2b788a9d40ad80ae05b4c452
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 27 Feb 2019 02:43:20 GMT
Etag: 7C43E972B47381C07B81D3D84B3B246A1A9B47F6
X-OCSP-Responder-ID: mcdpcaocsp13
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=264762
Expires: Wed, 06 Mar 2019 02:32:23 GMT
Date: Sun, 03 Mar 2019 00:59:41 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    f650fa3897416a996210f83b2120b953
Sha1:   7c43e972b47381c07b81d3d84b3b246a1a9b47f6
Sha256: fc442549d3a3c8b20d4f0daea67410526a69c2db44e56e2785ad580e81dfa818
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.25
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 26 Feb 2019 10:59:25 GMT
Etag: C80FF672E94B7A063E5ADC9E4A676ACC04B2ACF8
X-OCSP-Responder-ID: mcdpcaocsp12
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=208183
Expires: Tue, 05 Mar 2019 10:49:24 GMT
Date: Sun, 03 Mar 2019 00:59:41 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    0d28e0d26472b62bbcb7bbebaa0978cd
Sha1:   c80ff672e94b7a063e5adc9e4a676acc04b2acf8
Sha256: 9fd7c88e53d47468b5032de3defb66d7bfabcb13c2c1218a0514290a7803a3ab
                                        
                                            GET /sdks/OneSignalSDK.js HTTP/1.1 
Host: cdn.onesignal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         104.16.208.165
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d75701c1467dd1534f7756911243773f61551574781; expires=Mon, 02-Mar-20 00:59:41 GMT; path=/; domain=.onesignal.com; HttpOnly
Etag: W/"0dbc4b92898c44ef021413e248e9f044"
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Cache-Control: public, max-age=86400
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab4e4a3c4285-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   71846
Md5:    f8fcf2415bc8411158e888eccc67a81c
Sha1:   b083dbc48b2e56a5c1702676831b24314a32a281
Sha256: 9dd2f6f25cf2d939f1fed085ab04918d3a23d253601266d540ed389056dd6955
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    88188c79bd58eae67c0138727fa6f96e
Sha1:   ef83cc4ddd725d11d3d1a89f19f8cfb2bfb58372
Sha256: ab024ee101b653aedbe17c26510ce140f453c13397c7c82fc9b0a73ef7980ef0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ee67e8fcf725c7526729c3051d6e1d83
Sha1:   b8ee7fa07536004b3c4f4deef8eb854c4dd8ac52
Sha256: c9e302bb024cc43406737b2a17ba83f3f6ee19f1c3853f2343af9beda4f77700
                                        
                                            GET /css?family=Open+Sans:300,400,600,700,800 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/choose_files/code/css/main.css

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sun, 03 Mar 2019 00:59:41 GMT
Date: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   290
Md5:    472e8de87b47ad3672eb1a27fce4eda1
Sha1:   56c053b8e12d4425c659433b23c4122f37915494
Sha256: 5f537e65f40f8536ed91db78a7a1f25628b485cd7b975c1c927875f3e1e1dea2
                                        
                                            GET /gtag/js?id=AW-878509814 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         216.58.211.136
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 03 Mar 2019 00:59:41 GMT
Expires: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   24358
Md5:    8514a8d55ee363aabdf080100ab41d02
Sha1:   970f81575e811f2462cd1e966803eac7cc851f7f
Sha256: 6da8139344a5f5cb4e9957063370708dde9a2202777f765302e8a6d2c4773375
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=95653
Date: Sun, 03 Mar 2019 00:59:41 GMT
Etag: "5c79df12-1d7"
Expires: Mon, 04 Mar 2019 03:33:54 GMT
Last-Modified: Sat, 02 Mar 2019 01:40:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6632a1f06298222dbf234afeaa730ede
Sha1:   5012757881a4ce3d447449006b93724e86555902
Sha256: 79bb2441b1902a207305e2bf1168586688a8641f3786d36b3293651a9f0a62fb
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/btn/en_female1.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 5388
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Thu, 18 Jan 2018 18:27:07 GMT
Access-Control-Allow-Origin: *
Etag: "5a60e6fb-150c"
X-HW: 1548987051.dop009.sk1.t,1548987051.cds042.sk1.c
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab518a42b635-TLL


--- Additional Info ---
Magic:  PNG image, 310 x 114, 8-bit/color RGBA, non-interlaced
Size:   5388
Md5:    3101d5c5fbd6966e54da7dd5b9276ab8
Sha1:   e94d6c387d6e2cbc9995336ae664cdfb4bdc725f
Sha256: dcc19115d094d5436ec27f414fa63d9bc69ebcccab01f2c3374bd37df064a36d
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/btn/en_female2.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 6261
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Thu, 18 Jan 2018 18:27:07 GMT
Access-Control-Allow-Origin: *
Etag: "5a60e6fb-1875"
X-HW: 1549592621.dop016.sk1.t,1549592621.cds008.sk1.c
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab5189e2b647-TLL


--- Additional Info ---
Magic:  PNG image, 310 x 114, 8-bit/color RGBA, non-interlaced
Size:   6261
Md5:    905b7a8d7e1cf58caea44f5ccc2e204f
Sha1:   2a693affcd948863b5a7e27fc861d77fdc333770
Sha256: 17e38c984b1ffc262afc9d6fc9ed442d331e1b28292abaab6d3c1d28e6f02a88
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=135032
Date: Sun, 03 Mar 2019 00:59:41 GMT
Etag: "5c7a8311-1d7"
Expires: Mon, 04 Mar 2019 14:30:13 GMT
Last-Modified: Sat, 02 Mar 2019 13:20:17 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    af7e7de999890077801eb8334c529a1b
Sha1:   801c6dff8b2dcd8b90c2dda5b2b7bf833c74246c
Sha256: 0a3b34f70301609e322541ba975f6ddb18139c721b55485fa4233eac0a9e4063
                                        
                                            GET /rpggame_0001/02/choose_files/code/js/particles.js HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 5958
Connection: keep-alive
Cache-Control: public, max-age=86400
Content-Encoding: gzip
X-HW: 1548650487.dop015.sk1.t,1548650487.cds064.sk1.p
Access-Control-Allow-Origin: *
Etag: W/"5b78c27d-5b44"
Last-Modified: Sun, 19 Aug 2018 01:06:05 GMT
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab51aa46b635-TLL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5958
Md5:    d31164a5c92e682546340b7ec92ab632
Sha1:   51032695d12132a042d35be0a1cff7117cfa20ea
Sha256: 1f5e16ff288220d51a8b74d70b6e7f104866905f3f63cffe1a3118878d06a5c9
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    72d9c5b30b6b9ac64fbe9b948ee3f78c
Sha1:   6be1bdc708543d0a383ca91f85a700f6d2926bed
Sha256: 959ceb0bf0e946f47afef4feabea4cf7e03f49d59e9e4b592f2bb569d850ac82
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/title/undefined.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop007.sk1.t,1551574781.cds042.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab50fa17b635-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/btn/undefined_female.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop013.sk1.t,1551574781.cds053.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab510db6b61d-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/btn/undefined_male.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop011.sk1.t,1551574781.cds042.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab510c47b617-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            GET /rpggame_0001/02/choose_files/code/js/particles.json HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Content-Length: 601
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Sun, 19 Aug 2018 18:05:38 GMT
Access-Control-Allow-Origin: *
Etag: W/"5b79b172-7d0"
X-HW: 1551574781.dop005.sk1.t,1551574781.cds057.sk1.c
Server: cloudflare
CF-RAY: 4b17ab529a6ab635-TLL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   601
Md5:    99ae53a92879daa481ab177ad9a4494e
Sha1:   3a312c053133af9bb6202e373b82737657016371
Sha256: 18f19c2c9b80af5f5d81a3b9c1734ef9108f089fedd92dbdcd4ebc227f1d057d
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Methods: OPTIONS
Access-Control-Allow-Origin: https://connect.facebook.net
Cache-Control: public, max-age=1200
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-Frame-Options: DENY
Pragma: public
X-XSS-Protection: 0
Vary: Origin, Accept-Encoding
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: /Ajuo6YDkRo8kZNovJ6gAqi7jE0dhNa/E6nGqXEwg8fc4epiD5ZrjoRhjESTGLzW5TEh4uQCqr8Vz6fBDv8FxQ==
Date: Sun, 03 Mar 2019 00:59:41 GMT
Connection: keep-alive
Content-Length: 15216


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15216
Md5:    4272fc1b8e1127c0962d9df99d4b2c52
Sha1:   419b30fd126fce98e4ab3eeb5eb789ffb115f447
Sha256: d2e261422737508d12e437de3b47c59897622428aa711fae6c2d63a39106b7f1
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/title/undefined1.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop006.sk1.t,1551574781.cds032.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab518bc0b63b-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/title/undefined2.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop006.sk1.t,1551574781.cds054.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: EXPIRED
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab51a9eab647-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sun, 03 Mar 2019 00:59:41 GMT
Expires: Sun, 03 Mar 2019 00:59:41 GMT
Cache-Control: private, max-age=3600
Etag: 14034039398999369047
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39",quic=":443"; ma=2592000; v="44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8872
Md5:    1bf6eebdc703650bdb0c327e475c4619
Sha1:   1dbed125abb1dc8b88bf25d575d344734c80ba4b
Sha256: 264fec016d940625e57670eb7fb0a2709465334db9a2bdab73d43df40ec21efa
                                        
                                            GET /rpggame_0001/02/choose_files/imgs/set/undefined/age/undefined_age.png HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sun, 03 Mar 2019 00:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=14400
X-HW: 1551574781.dop002.sk1.t,1551574781.cds032.sk1.p
Access-Control-Allow-Origin: *
CF-Cache-Status: EXPIRED
Expires: Sun, 03 Mar 2019 04:59:41 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab51ca4bb635-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   126
Md5:    716ea1d918594c53bc58f31c3ee1cd72
Sha1:   0ab9eed839e65716163282f70464eab08bcf735c
Sha256: 032b3ed267b9b68d81fba8c53fb1c5423f35914aee0e6190e2ee002e1178a2bd
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e778e1324dab9d38fbd7b874a97f0956
Sha1:   2ebf561e7aeca8875cd6bd9a54a31be0c2fa99ca
Sha256: b4fc63ee205de8f5197d972e1e60172806aa49d98bc3b54590e0bba0384b3310
                                        
                                            GET /pagead/viewthroughconversion/878509814/?random=1551574781993&cv=9&fst=1551574781993&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=2oa241&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Frpgmasterleague.com%2Frpggame_0001%2F02%2Findex.html%3Fsd%3D1%26set%3D02%26cep%3DMkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166%26zone%3D1575873-4116211009-2560548777%26campaign%3D129813420%26ip%3D77.40.129.123%26banner%3D22519108%26ssp%3D%26ntk%3D29a%26redirection_cost%3D%26cli&tiba=%231%20GAME&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sun, 03 Mar 2019 00:59:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/pagead/1p-user-list/878509814/?random=1551574781993&cv=9&fst=1551571200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=2oa241&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Frpgmasterleague.com%2Frpggame_0001%2F02%2Findex.html%3Fsd%3D1%26set%3D02%26cep%3DMkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166%26zone%3D1575873-4116211009-2560548777%26campaign%3D129813420%26ip%3D77.40.129.123%26banner%3D22519108%26ssp%3D%26ntk%3D29a%26redirection_cost%3D%26cli&tiba=%231%20GAME&async=1&cdct=2&is_vtc=1&random=1773742240&resp=GooglemKTybQhCsO
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 03-Mar-2019 01:14:42 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39",quic=":443"; ma=2592000; v="44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8d06f284d22dac31de680d47e047299f
Sha1:   f4304804eeba43c8d839e9048d5efddbc29f6ba6
Sha256: bb5987b53ba7ca40461b3cf68f9ff00b5c4c3c00e04bc68b6150705f28cde842
                                        
                                            GET /pagead/1p-user-list/878509814/?random=1551574781993&cv=9&fst=1551571200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=2oa241&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Frpgmasterleague.com%2Frpggame_0001%2F02%2Findex.html%3Fsd%3D1%26set%3D02%26cep%3DMkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166%26zone%3D1575873-4116211009-2560548777%26campaign%3D129813420%26ip%3D77.40.129.123%26banner%3D22519108%26ssp%3D%26ntk%3D29a%26redirection_cost%3D%26cli&tiba=%231%20GAME&async=1&cdct=2&is_vtc=1&random=1773742240&resp=GooglemKTybQhCsO HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         216.58.207.228
HTTP/1.1 302 Found
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 03 Mar 2019 00:59:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.google.no/pagead/1p-user-list/878509814/?random=1551574781993&cv=9&fst=1551571200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=2oa241&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Frpgmasterleague.com%2Frpggame_0001%2F02%2Findex.html%3Fsd%3D1%26set%3D02%26cep%3DMkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166%26zone%3D1575873-4116211009-2560548777%26campaign%3D129813420%26ip%3D77.40.129.123%26banner%3D22519108%26ssp%3D%26ntk%3D29a%26redirection_cost%3D%26cli&tiba=%231%20GAME&async=1&cdct=2&is_vtc=1&random=1773742240&resp=GooglemKTybQhCsO&ipr=y
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Mar 2019 00:59:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    03d8fcf61b9aad9704e5006de14a9990
Sha1:   bde78002e3409f65d917904729b98af8dbc810c5
Sha256: 8a18824373a2580c16450893b412a8405675b21cd4e6ea0fec0263211211fe91
                                        
                                            GET /pagead/1p-user-list/878509814/?random=1551574781993&cv=9&fst=1551571200000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=2&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&gtm=2oa241&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Frpgmasterleague.com%2Frpggame_0001%2F02%2Findex.html%3Fsd%3D1%26set%3D02%26cep%3DMkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166%26zone%3D1575873-4116211009-2560548777%26campaign%3D129813420%26ip%3D77.40.129.123%26banner%3D22519108%26ssp%3D%26ntk%3D29a%26redirection_cost%3D%26cli&tiba=%231%20GAME&async=1&cdct=2&is_vtc=1&random=1773742240&resp=GooglemKTybQhCsO&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rpgmasterleague.com/rpggame_0001/02/index.html?sd=1&set=02&cep=Mkg0_yfQMiJc0dqiIY7KcjJ8aRjnkRM2uVTLI8g3JtxFKG7e-1xnVAfn4q-1KPuiocnD4-H-cqvRg3xQHonKhq0WAdhn25oO5-0mX52YoFP2On_qX7qXFcpFwKjE4FpjTG1zz1TnbthnTFe2ayWX6Pp4K1643quv91XLudhXQPNnNqNMp0Gs3UuRNq7gxjLeWdqvdn2zj-LzSVBEL1fhuJ22NmCnHR2ATOBPCHXniVJ5Q0fkdc5YDv3R8K-AHrjzvwQTtvA_llvmdSTeyfKUu1IBsQxRXUxjVjT4q0xqiO6QeBKF8InsOsEldqfxh166&zone=1575873-4116211009-2560548777&campaign=129813420&ip=77.40.129.123&banner=22519108&ssp=&ntk=29a&redirection_cost=&clickid=15515747781294500219238292977227566

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 03 Mar 2019 00:59:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: rpgmasterleague.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d084d7e1f980b938eaf875d7cfcdfb85a1551574781

                                         
                                         104.28.18.102
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sun, 03 Mar 2019 00:59:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=86400
Last-Modified: Wed, 27 Apr 2016 16:45:40 GMT
Access-Control-Allow-Origin: *
Etag: W/"5720ecb4-c6"
X-HW: 1548650553.dop001.sk1.t,1548650553.cds049.sk1.c
CF-Cache-Status: HIT
Expires: Mon, 04 Mar 2019 00:59:42 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4b17ab596905b61d-TLL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   64
Md5:    ce2521545b94598ae74196ee9ea9daf9
Sha1:   f9d08c84152378ca6472d760579d0ce67ab57f96
Sha256: 78f59a0a147d8844b82ae42a90c6a4614d90d50c65415464ecfbae4d1bc01c66
                                        
                                            GET /ck_jump?id=cz00MDExNzU0OTg3NDA3NTcwJnQ9MTU1MTU3NDc3NyZoPTEzODcwNzEyMzk=&__if=0&__pm=0&__wv=0 HTTP/1.1 
Host: tr4ck.brucelead.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tr4ck.brucelead.com/ck.php?line_item_id=17530&subid_spx=&clickid=444683733
Cookie: session=20190303_9e188b40-3d4f-11e9-a3e5-afcd851b2aae%7C4011754987407570%7C2019-03-03T00%3A59%3A37%2B0000%7C3144096%7CNorway%7C17530%7C%7C444683733%7C6673%7C4%7C4660%7C17530%7C2%7C4445%7C0%7C12657%7C10976%7C18583%7C3966%7C0%7C0%7C3%7C1%7CWindows%7C3%7C%7C%7CFirefox%7CPowerTech+Information+Systems+AS%7CWIFI%7C77.40.129.0%2F24%7C77.40.129.123%7C0%7C%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cnull%7Cen-us%2Cen%3Bq%3D0.5%7C0.0%7C0.0%7C0.0%7C0.0%7C0%7C%7C1551574777563%7C%7Cfalse%7Cfalse%7C54%7C0%7C51%7C%7C0%7C0%7C%7Ctr4ck.brucelead.com%7Cno%7C%7C0.0%7C

                                         
                                         109.123.118.67
HTTP/1.1 302 Found
                                        
Date: Sun, 03 Mar 2019 0:59:37 GMT
Server: SpirooxPerformance-Server-1.0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Connection: close
Location: https://qpxrg.com/dep.php?pid=4505&format=POPUP&subid=Uzo0NjYwLFNCOixMOjE3NTMwLEM6MTg1ODM%3D&cid=20190303_9e188b40-3d4f-11e9-a3e5-afcd851b2aae
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: c18583=1 ; domain=tr4ck.brucelead.com; path=/; expires=Mon, 04 Mar 2019 0:59:37 GMT l17530=1 ; domain=tr4ck.brucelead.com; path=/; expires=Mon, 04 Mar 2019 0:59:37 GMT


--- Additional Info ---