Report - purpose-lack.at.ply.gg/

Report Overview

Submitted URL
purpose-lack.at.ply.gg/
IP
209.25.141.180
ASN
#13768 COGECO-PEER1
Submitted
2022-11-29 04:02:36
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	338 B	729 B	23.36.77.32
playit.gg	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	13 kB	1.7 MB	104.26.4.160
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	21 kB	142.250.74.174
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	5.6 kB	142.250.74.35
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	950 B	34 kB	216.58.207.195
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	44 kB	34.120.237.76
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	412 B	12 kB	142.250.74.10
purpose-lack.at.ply.gg	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	354 B	83 B	209.25.141.180
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-29	medium	purpose-lack.at.ply.gg/	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	playit.gg/static/js/main.fa0ea54d.js	1.3 MB	2023-03-09	2023-03-26
Pretty URL playit.gg/static/js/main.fa0ea54d.js IP 104.26.4.160 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 03:26:31 Last Seen2023-03-26 08:36:46 Times Seen8 Hash 1dd52d57c7084abace4e66d81d925ed1 0932a81dfe6edbb677f69d188e65e36ffbaecaba f5a14076eb28c5a6fb12499305ec8fa7d1555eed272712c1f157d3bfd0c8c670 Loading...

	www.googletagmanager.com/gtag/js?id=G-XZC0D9DN3J&l=dataLayer&cx=c	217 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtag/js?id=G-XZC0D9DN3J&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:13:41 Last Seen2023-03-11 22:13:41 Times Seen1 Hash a1b1c330927ea5886fad979f8574bdd4 0db161b13e5ff421f75c6cded69247835a34aa47 b77306cec2355b3e530bc926946116c038162f1e969d46d70815f8008e76a029 Loading...

	www.googletagmanager.com/gtag/js?id=UA-159351898-1	115 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtag/js?id=UA-159351898-1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:13:41 Last Seen2023-03-11 22:13:41 Times Seen1 Hash 6ff28c89f29a16dd9e83b4c9b5ef7e2f 56e51f1ae1a649f00eefc7182f03ae92768624c5 35d7bbf3441a0bb1056fa270b7fffc0d961e37b44023c7a83454a3cac8fff337 Loading...

	playit.gg/	131 B	2023-03-08	2023-03-26
Pretty URL playit.gg/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:34:08 Last Seen2023-03-26 08:36:46 Times Seen11 Hash d1491ecff1c152ab0c2c264a787ff53e bf1316982cbd7eed05941b87b042632dd973a215 06d34a5ca639c4523e5931dfa0ffcc81d8e4d01b759600eb47c05ec4e1db1910 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-26
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-26 05:50:27 Times Seen1534 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

HTTP Transactions (53)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6578
Expires: Tue, 29 Nov 2022 05:52:03 GMT
Date: Tue, 29 Nov 2022 04:02:25 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4869
Cache-Control: max-age=114605
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:25 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:52:30 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Tue, 29 Nov 2022 05:14:05 GMT
Date: Tue, 29 Nov 2022 04:02:25 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 03:19:35 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2570
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: v7Wq+KlF0cJ8sPlgPupBf7N4Cc5lGS/ILGsiN7bxYZ9VDU9iLgHCKKEZh3Lfd0aIZCOuMKyO1a6+nyN/3xb94w==
x-amz-request-id: KXXE7W40NBKFTSCV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 03:45:17 GMT
age: 1028
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 04:02:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.77.32

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
5dde38ca5cb4b63600f003a1aedc0769
f69f1217c8076125018b48446f91b2ac5c62e705
f0ea0e19af0f85fe8fe8188c8a21e3de7c2a3d7ed5fbc94d68e9b10c409800ae

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F0EA0E19AF0F85FE8FE8188C8A21E3DE7C2A3D7ED5FBC94D68E9B10C409800AE"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21545
Expires: Tue, 29 Nov 2022 10:01:31 GMT
Date: Tue, 29 Nov 2022 04:02:26 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

playit.gg/static/media/explain.fb04a33f31470be52fa3.png

104.26.4.160

200 OK

59 kB

URL HTTP/2
playit.gg/static/media/explain.fb04a33f31470be52fa3.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 2531 x 1165, 8-bit/color RGBA, non-interlaced\012- data
Size
59 kB (58979 bytes)
Hash
3ab1ba1d4fcd67568882d985d2cf83e7
9ce7fd3a4f99e62d9fb0bd01677d79c5d96397f9
e36c2fb4370ce891a4cca813281b4c73e4a463f2e36e549d3335adfc28076faa

HTTP Headers

GET /static/media/explain.fb04a33f31470be52fa3.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 58979
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-e663"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wGNvUcheKarf%2FaiK4v00HgyC4moCH0x0jdp60%2B38O4ROIbOGY%2FU7%2F0oMoIQPcU1le0NroJ9DxhFwB86pGmUFaaSTyKQH%2BMAyAOiZhpe%2BTWUcwggGCZmujkvbZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a28b35b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/valheim.87e34d64204b36e896a4.png

104.26.4.160

200 OK

40 kB

URL HTTP/2
playit.gg/static/media/valheim.87e34d64204b36e896a4.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 341 x 341, 8-bit colormap, non-interlaced\012- data
Size
40 kB (40228 bytes)
Hash
f77f3add85959ecceeb47efdbe7077ad
4ea9a41cca5f92707db39a33b17938190e073563
0319d6059a77582c20b6a882d1b4f0729fa33f2327a0fb8dbf8ef7858becb25d

HTTP Headers

GET /static/media/valheim.87e34d64204b36e896a4.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 40228
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-9d24"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E0XOnchs3%2FyJoa0dYMlVO3lwjr3l%2BtIsnhafzFFEmlF%2BGhAUfPgXRFbWuqFHhtAWYt25ytp5MO%2Bf19IauFV58y%2BIJBY83a9mSG1embmhrSbtqhYzoHs5hjeBWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a29b3db503-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

playit.gg/static/media/rust.ef4d48b3e35e25569ae7.png

104.26.4.160

200 OK

23 kB

URL HTTP/2
playit.gg/static/media/rust.ef4d48b3e35e25569ae7.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 533 x 533, 16-bit/color RGBA, non-interlaced\012- data
Size
23 kB (23254 bytes)
Hash
0d5cd7e12e62d2a5f3c6ee89daaf7dbf
0130f4edb3f0443b7337ecb6698de4e6eaede311
2caeb22c1576d9f11877609714bc7c8638a3f5d184f0fb41e0585100f5917c4d

HTTP Headers

GET /static/media/rust.ef4d48b3e35e25569ae7.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 23254
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-5ad6"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWSe8fv11AFmzTMeqbKUm25MyTV9xsMdOV8hz%2B23xxVyayU1%2BYFtHAKWpT%2FWeGVRdm9AOuu%2FPuFYjwAXnbdTeqr3qshWjtVWIE6sltQ3ljNJYtZf4LXab%2FI0Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a29b40b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/minecraft.16126f4d1268a7a41e7f.png

104.26.4.160

200 OK

23 kB

URL HTTP/2
playit.gg/static/media/minecraft.16126f4d1268a7a41e7f.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size
23 kB (23103 bytes)
Hash
6173d2f780bfa78c9efb987d20e87b91
e02e8b9f10a759f19d5bea6a3510f847a7c9a86e
a0770f6031e62c5410f5288531ea05c7e7eb6e4db03bc34ede16dbcf5ba4ac6c

HTTP Headers

GET /static/media/minecraft.16126f4d1268a7a41e7f.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 23103
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-5a3f"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sLMGDzn2%2FQfSoanvxHvoM9AcMjMKh6hZRasahVCh90%2BjZgd0Y6dHp6KbMzUugmMgYnVfJ3xOinniCfOeeCDN8Z4TdhCwPfJKnwOY6v63swkKGuJMZ%2BT34Z1ghg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a28b36b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/terraria.a9686ebd17f444068ee0.png

104.26.4.160

200 OK

49 kB

URL HTTP/2
playit.gg/static/media/terraria.a9686ebd17f444068ee0.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 190 x 352, 8-bit/color RGBA, non-interlaced\012- data
Size
49 kB (48855 bytes)
Hash
14f21f9ec807ceb7a64e44bb87514bef
5de65d6dd8935093c97a802c1c0af6912300229e
0c60cf5087769bb14f131c7430c5c876d2b5a39a7ee3a7b9de878366cfd78d77

HTTP Headers

GET /static/media/terraria.a9686ebd17f444068ee0.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 48855
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-bed7"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2FHXOAEQGlMaZDyjTaTzdw5UpM2gYxGZuJPBTFl%2B7xMObKXcb1Lg%2BBLTf5QNJpkZTrKtFvhGri1i0cK6uwn%2Fdrh%2FlPovqpjmjKp%2Fg5kRKesqvhAY88TNtDRh7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a29b3eb503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/starbound.adeba7d6930afd203254.png

104.26.4.160

200 OK

29 kB

URL HTTP/2
playit.gg/static/media/starbound.adeba7d6930afd203254.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 577 x 577, 8-bit/color RGBA, non-interlaced\012- data
Size
29 kB (28701 bytes)
Hash
fd17e228e185371f7265e189a2a36542
d7cc62482607e432a73def434967248072339572
ea30f35f3b9495676160521109dc7aae934e0234561e6324bd461cc0057bad50

HTTP Headers

GET /static/media/starbound.adeba7d6930afd203254.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 28701
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-701d"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9edYXShvLLwYHXv64sANL4Yfkvi5zaHSh%2FcOff1Fsd%2Ftlp5FHq0pFSGp5oczvP3AUVg59%2F8hfx0l5OU5LIVUgltMgMP87tk%2F8utS7yrwDuF%2FKxdDU1YQfjgaVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a29b3fb503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/7days.8eb85bf973735d5733bd.png

104.26.4.160

200 OK

83 kB

URL HTTP/2
playit.gg/static/media/7days.8eb85bf973735d5733bd.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size
83 kB (82644 bytes)
Hash
c695a2e6aa23ede7978e0034a508f7e1
c33dcc843b07797fbc39bc2c5d49e26a919f58a5
83da7669cbf0133e7cf3f4ca95b275afd3d618f178dfe30ddc93f0ab43a30413

HTTP Headers

GET /static/media/7days.8eb85bf973735d5733bd.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 82644
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-142d4"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FRj2ha7Y%2BULye8%2BdbKuYYlVx6dYAfAXn3e0RhaVxUiOmt5xkdNVtPUq%2Bd6BGGGF%2BYeTF1jjuJMcs8Ndip7au5BE9kxaWdaBCLG9i3CGJVst9LTmXPbfnfly9dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a29b41b503-OSL
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 03:11:13 GMT
cache-control: public,max-age=3600
age: 3073
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.195

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playit.gg
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 462498
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.195

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playit.gg
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 464917
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

playit.gg/static/media/minecraft-block.408b8d2e289a1c95d81f.png

104.26.4.160

200 OK

60 kB

URL HTTP/2
playit.gg/static/media/minecraft-block.408b8d2e289a1c95d81f.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 213 x 139, 8-bit/color RGBA, non-interlaced\012- data
Size
60 kB (60416 bytes)
Hash
40b7888eb82eec678ed3198753e0079a
8e17453f860c230fdd96862b626ff1b53db228da
6f339fb339d80ef0ffecce8ac98245c653020cca77ab23bae4d7b60ec746bc2b

HTTP Headers

GET /static/media/minecraft-block.408b8d2e289a1c95d81f.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 60416
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-ec00"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=no2wN87DFEIKwmAZIG%2BdBE9WWXMtMVXV8V7Mt%2Bb%2BTOJMWIXXUclp7HKbtYPCt4uCAmU8%2F7%2FeEZQJNlrEGppj7CZTA7GLffzsP6BTShhsGZLvbYwoxxbV2sCAfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbd3b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/rust-block.9ce12caa461160f92632.png

104.26.4.160

200 OK

58 kB

URL HTTP/2
playit.gg/static/media/rust-block.9ce12caa461160f92632.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 213 x 139, 8-bit/color RGBA, non-interlaced\012- data
Size
58 kB (57870 bytes)
Hash
1a37ff827c36b169141cb4121581bbb5
ca19896f5afc85fd1c2cff8d1d0f373ce6a9717e
fdcaafb71ade1531b5f2f2f1c0896c68bcf344da1c33f8ef90fa204999e302e4

HTTP Headers

GET /static/media/rust-block.9ce12caa461160f92632.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 57870
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-e20e"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AWECuRc0ueMf5KCiUxPgVKuLx3qLdhfUKZ4mttWJfTcWCERDwXYaEIakE5sgesbr57HPXWpTNyLvUk9S5GcRTBt8TdIqL0g0yx570wXpdpvm1IOE81RFwnwlIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbdbb503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/map.98a24902f8883720a7bb.png

104.26.4.160

200 OK

53 kB

URL HTTP/2
playit.gg/static/media/map.98a24902f8883720a7bb.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 2500 x 1600, 8-bit/color RGBA, non-interlaced\012- data
Size
53 kB (53260 bytes)
Hash
e4857a1e9dd09c4f4b2d51f7a55552a4
e58ef706af53edc62ffa4786b5bc642578dc0e68
d1fa3ba864918437e473ef1cd0f059eb367a3c325ad9379975218cf59154bebf

HTTP Headers

GET /static/media/map.98a24902f8883720a7bb.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 53260
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-d00c"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uSSjZ0qT4gCT0phbXs%2FMm%2FZKdGSMYSi%2BxBjO%2F8KLUX5lNsCeqmW6QzHCxpihbtSKJm61y1%2BTo2Eevwe3kD5FGIyryHjfPKUCRYUWpZQqvZrKyLqB96sb7vXqFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbd1b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/bedrock-block.de686ce2c26d30565aa6.png

104.26.4.160

200 OK

62 kB

URL HTTP/2
playit.gg/static/media/bedrock-block.de686ce2c26d30565aa6.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 213 x 139, 8-bit/color RGBA, non-interlaced\012- data
Size
62 kB (61774 bytes)
Hash
418da6fca1cbbecf8ecb9ec799851fc2
79183aa8913506b4f718546808d190baf1619364
679c6f47e6c211413ca55efb1ade876768e85027b47cad215e482cc962ab208c

HTTP Headers

GET /static/media/bedrock-block.de686ce2c26d30565aa6.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 61774
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-f14e"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2Fjvgfu04I8vr%2FDCfVgWVH8C37IAamDgS%2FECdDrUK7%2BBcGQIFHBRbFVbT9HsIuCwQ%2FhoS2ZDhXzpuJCy%2Fidp5pb%2FL9KI8xBY8aBP4SF28vVWAXloqPNWTr%2B%2F7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbd4b503-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

playit.gg/static/media/terraria-block.4bbef41903aa99affd58.png

104.26.4.160

200 OK

46 kB

URL HTTP/2
playit.gg/static/media/terraria-block.4bbef41903aa99affd58.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 213 x 136, 8-bit/color RGBA, non-interlaced\012- data
Size
46 kB (45536 bytes)
Hash
f9b97027178c8989189b24ba258259e1
88ab04740f054b4c91bf2ca2c0b3783021d6963d
e14f052ad70292b37619fe8a87cb6cd1867110fc2e4f88578892b704d68e86e0

HTTP Headers

GET /static/media/terraria-block.4bbef41903aa99affd58.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 45536
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-b1e0"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cb%2FuOXZgBJVLeistz%2F5FvEqBVWC7v29scb5%2Ba%2FvyEtYC4Er4OxHeWRDBcYUIOIbNBzNrneErmYQp%2BxnikbA9TlzgJDP4CoONqm3ZFkMOZOSBYLtGqqWshvDsXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbd9b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/valheim-banner.f1b5c2db8bb03ada1477.png

104.26.4.160

200 OK

330 kB

URL HTTP/2
playit.gg/static/media/valheim-banner.f1b5c2db8bb03ada1477.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1600 x 120, 8-bit/color RGBA, non-interlaced\012- data
Size
330 kB (330504 bytes)
Hash
85571c3643f33afa4438bb0584d89368
53884a2ae3abc55efff8ae143622b2f8365fb255
f4214bb2d6cd2f8a9f72e334a0595d7473175d28f951f7cc4b93ae2e6862e970

HTTP Headers

GET /static/media/valheim-banner.f1b5c2db8bb03ada1477.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 330504
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-50b08"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mx%2BQmxAgHtQvGjVVcUb4ymvevvwyjhxIdU%2B5Z3NV1SJOp%2FOTZz6i3JZkOW3CfEcFi%2BZDrWGtBNJ0wKzvVmSwhAHvy3y%2Fmo9B0NCP8Kt3CuN9LSlGYppTMxUjkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbd5b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/media/7days-block.b2505927925fbaa49e17.png

104.26.4.160

200 OK

70 kB

URL HTTP/2
playit.gg/static/media/7days-block.b2505927925fbaa49e17.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 213 x 139, 8-bit/color RGBA, non-interlaced\012- data
Size
70 kB (69861 bytes)
Hash
c305e98d75285a8b4282524ef0116eed
9f1511d105e61ab5f84b5605802397c46f76681f
f6cb1ac0bc15e71a80c324d314437e3fcc8cb6c99a18e12667d21c31adb87fae

HTTP Headers

GET /static/media/7days-block.b2505927925fbaa49e17.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 69861
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-110e5"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wfLGtYy605ov0GyW73ESFVDK0vW9jvzrnGbal1CxgDelBAQYwoBShCCK0SLkh8Ut%2BlIJFb1mDE%2F1RoQKiFlEQ5TUrHAaYsVIWXikTjSusqXepSIw4amVRGdjbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbdcb503-OSL
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4415
Cache-Control: max-age=109084
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:26 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:20:30 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

playit.gg/static/media/starbound-banner.5a0d92f27870d79fd63c.png

104.26.4.160

200 OK

110 kB

URL HTTP/2
playit.gg/static/media/starbound-banner.5a0d92f27870d79fd63c.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1600 x 120, 8-bit/color RGBA, non-interlaced\012- data
Size
110 kB (109708 bytes)
Hash
6922762d33eb83d316e544822ba5d81d
1ee330ee82a51dd7de793d6ed1362f9ce4ec0913
c19bb4bdb7116790cb473f6465f9662947c64038686336350939d2a587e84b6d

HTTP Headers

GET /static/media/starbound-banner.5a0d92f27870d79fd63c.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: image/png
content-length: 109708
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: "63608d52-1ac8c"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zWSv1lb5eB%2BWmx6dSzpvsB2Uodr%2FYqYWoYQygTpVCq%2FMMo2C%2FVAfTuxs0mxJ4Fmd0jNPthsEX4ztv6wOFBqlFjjyQr%2B0fybTro5dD4rXxbrkPcsqUnj1QgD%2B8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a3fbdab503-OSL
X-Firefox-Spdy: h2

playit.gg/lib/fa/webfonts/fa-solid-900.woff2

104.26.4.160

200 OK

155 kB

URL HTTP/2
playit.gg/lib/fa/webfonts/fa-solid-900.woff2
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 154840, version 769.1280\012- data
Size
155 kB (154840 bytes)
Hash
be4dccbe54eea47a0ad5d7bb60a3c17d
1979128e8ba1517d85f5e4ee505abf486c51557c
52bbd916956b4ed8b9d71d1784e4008b207814ec506203326fb36052f3451adb

HTTP Headers

GET /lib/fa/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://playit.gg/lib/fa/css/all.min.css
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: application/octet-stream
content-length: 154840
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: "63608d45-25cd8"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NyGmIGoI5ujsKenuYlKoydBrVDMoy%2Fyn1rY4OFELNjA9JY15PtZXr8pALQh93RtqndcjY7x3B2DYUEIcNwrcWa9WDOoDWStSwPBc7ieoCvzykcdmacTJQMyndw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a40be2b503-OSL
X-Firefox-Spdy: h2

playit.gg/static/js/main.fa0ea54d.js

104.26.4.160

200 OK

340 kB

URL HTTP/2
playit.gg/static/js/main.fa0ea54d.js
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65465)
Size
340 kB (340216 bytes)
Hash
f2eeb74067e8de6f586472bf69b81023
07900793d33d4f99ed089fb631821caf7ca5c7b0
9e53e699cd6501784b51b0141f958b860dcd34c1618768ef13615566baf58a2b

HTTP Headers

GET /static/js/main.fa0ea54d.js HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 03:06:58 GMT
etag: W/"63608d52-133e4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 52
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a0xpYaW6tvLMMJJg2Toh8BoZxdSk6TfZNzTfrHD71n99LkkzELntaoByBFeUZsvAbseAsDJdLA5tJnT5jL%2FKFCJoMkZq20EYCg8hP5mAqwLc2PJv9zXADLjiPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a28b34b503-OSL
content-encoding: br
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:02:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 02:41:08 GMT
expires: Tue, 29 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 4879
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

playit.gg/lib/fa/webfonts/fa-brands-400.woff2

104.26.4.160

200 OK

105 kB

URL HTTP/2
playit.gg/lib/fa/webfonts/fa-brands-400.woff2
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 105112, version 769.1280\012- data
Size
105 kB (105112 bytes)
Hash
5531dd3a7705ec68a6c5f5d02b25da6f
e219af1e3bbc2219359d3d0916e263b279c4abfd
967394d1fd10b388d99bec9df2a3cab546a40f695f5c70641daf0b51af5604c6

HTTP Headers

GET /lib/fa/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://playit.gg/lib/fa/css/all.min.css
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:27 GMT
content-type: application/octet-stream
content-length: 105112
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: "63608d45-19a98"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hi6idF1TuPqVeZRhzmPPVOfSqE6gUS78COHLJ0M6Mz%2BCALSci6JjecNiPi%2FYv5fY5%2FGsPZ2tTlvc0DMV%2B0juv0ukX0Jlv0azkgOayX98pKo%2F%2FHdpRwpyTlqXdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a41becb503-OSL
X-Firefox-Spdy: h2

www.google-analytics.com/collect?v=1&_v=j98&a=1730972074&t=pageview&_s=1&dl=https%3A%2F%2Fplayit.gg%2F&ul=en-us&de=UTF-8&dt=playit%20-%20making%20it%20easy%20to%20play%20games%20with%20friends&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAAAAI~&jid=&gjid=&cid=1037706840.1669694495&tid=UA-159351898-1&_gid=755195886.1669694495&gtm=2oub90&z=46434448

142.250.74.174

200 OK

35 B

URL HTTP/2
www.google-analytics.com/collect?v=1&_v=j98&a=1730972074&t=pageview&_s=1&dl=https%3A%2F%2Fplayit.gg%2F&ul=en-us&de=UTF-8&dt=playit%20-%20making%20it%20easy%20to%20play%20games%20with%20friends&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAAAAI~&jid=&gjid=&cid=1037706840.1669694495&tid=UA-159351898-1&_gid=755195886.1669694495&gtm=2oub90&z=46434448
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015

HTTP Headers

GET /collect?v=1&_v=j98&a=1730972074&t=pageview&_s=1&dl=https%3A%2F%2Fplayit.gg%2F&ul=en-us&de=UTF-8&dt=playit%20-%20making%20it%20easy%20to%20play%20games%20with%20friends&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAAAAI~&jid=&gjid=&cid=1037706840.1669694495&tid=UA-159351898-1&_gid=755195886.1669694495&gtm=2oub90&z=46434448 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Mon, 28 Nov 2022 05:43:46 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 80321
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

playit.gg/logo192.png

104.26.4.160

200 OK

4.6 kB

URL HTTP/2
playit.gg/logo192.png
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size
4.6 kB (4575 bytes)
Hash
3aceb02e6f7312c4d69d7c76780011d2
805bb6bb6b41e1d0469b85594f11408f783c1a65
1b2c90bd07442dcefc31e0b968ac14e63317289664c17a4665d0cd79d286b6a6

HTTP Headers

GET /logo192.png HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694546.0.0.0; _ga=GA1.1.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:27 GMT
content-type: image/png
content-length: 4575
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: "63608d45-11df"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YvuGvxTrAsgAA41Vb%2FMnzYKOiODuA3vdfkO53AhveEMYlrC10A%2By3HKI2Jx%2FKgSabiJAmo5%2BW2VwMtEijdl4rQpNPzexWz%2B4cITkKLS%2F1gzDNqc2LJCy5fnTYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a72d50b503-OSL
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4843
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:02:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4843
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:02:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4843
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:02:28 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4871 bytes)
Hash
a4058fd62595d15c58b3d3266de9865a
d0dff35eb78f129b5da407043037bcf9c27e55c0
ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:56:43 GMT
age: 68745
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8796 bytes)
Hash
7e44c46db2ac9917110dc47aa38fdc85
b5b245c90705ad80c31d457c0d7c96709ca31e96
5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad01b94-5d16-49b9-bf3e-5742e02ae8b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8796
x-amzn-requestid: 2eed036c-fcda-425b-8c5d-0b0ff31214a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEEWMIAMFwKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-5cb071a2098d43d909eb8d5c;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uWzs8gOBoczTeYXB7-FfJemWbh-hYHwNcR3b9BM5VtJ55NRUzCZeTQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 14:56:22 GMT
age: 47166
etag: "b5b245c90705ad80c31d457c0d7c96709ca31e96"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4916 bytes)
Hash
83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 04:16:47 GMT
age: 85541
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4862 bytes)
Hash
748366131b496e41f92e15ce7d1cd0e0
a6c7a59a6599ece2cf0e76c778c920dea94ff469
b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4862
x-amzn-requestid: 17c6fb35-2dc8-45e4-a226-a74ba94323b3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYlHXxIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5d0-5a0f4f667a3747166eb2b338;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2ImCYNlZ1ri4mMpJhMnoucEoQPgKly8gj7KvMPFYb6WpsoJ18WyFog==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 13:28:25 GMT
age: 52443
etag: "a6c7a59a6599ece2cf0e76c778c920dea94ff469"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap

142.250.74.10

200 OK

11 kB

URL HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
11 kB (10833 bytes)
Hash
f504fb3ccd08685eaa7df72775ea3d3f
b2005a16f3ac2305932b1430ad124be33ab6333f
c4cb6550c5e1e0ce1153192d0ad335ba2d09c7dedc9ad621886fcaacb539df4b

HTTP Headers

GET /css2?family=Roboto:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 04:02:26 GMT
date: Tue, 29 Nov 2022 04:02:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

34.120.237.76

200 OK

15 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5049b423-1bbd-4caa-891e-b46234fc1a6a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
15 kB (14856 bytes)
Hash
df665be3ae1347cb9bb1443a6a1a33e6
e0617845684a8f7586b37e8be8976bbe6a93563e
15155df8643daa0408633922e15691a3b00b393ee433e1162cf031024e84d0a4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5049b423-1bbd-4caa-891e-b46234fc1a6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14856
x-amzn-requestid: 22ec3d7a-91f5-4b67-9621-a93b1e5d09e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYejFKxoAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d45c-34ffa40356825a715a7eb5cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:07:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GBeOUYK49uZurdS8v-Fmimf_GDcBqDR6hlZ7eRaMeGjs0iEeIvhIWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:34:57 GMT
age: 1651
etag: "e0617845684a8f7586b37e8be8976bbe6a93563e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

purpose-lack.at.ply.gg/

209.25.141.180

302 Moved Temporarily

0 B

URL HTTP/1.1
purpose-lack.at.ply.gg/
IP
209.25.141.180:0
ASN
#13768 COGECO-PEER1

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: purpose-lack.at.ply.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Server: playit-cloud
Location: https://playit.gg

playit.gg/assets/reviews.json

104.26.4.160

200 OK

0 B

URL HTTP/2
playit.gg/assets/reviews.json
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/reviews.json HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playit.gg/
Connection: keep-alive
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: application/json
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: W/"63608d45-53c7"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rqchZjkZtUYV1%2FF4XL%2FfXH3LIS%2FRGsFceVmaruNhx%2FodH%2BM2IMQ3GP7bYFTkh9xAgnb%2FZ99nSGdUrwgXJg3N668IRHVqgn36TLP%2FKX9LsucAimaj0E8Sr3eLtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771872a5ac93b503-OSL
content-encoding: br
X-Firefox-Spdy: h2

playit.gg/favicon.ico

104.26.4.160

200 OK

0 B

URL HTTP/2
playit.gg/favicon.ico
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694546.0.0.0; _ga=GA1.1.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:27 GMT
content-type: image/x-icon
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: W/"63608d45-3c2e"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LTKrUPY67S57H1qvHAE82GwtGTIUsF3JRmcCQsenayAFVB6%2BaN0mDWasSH%2FS4LADllJvkY%2F0tFWxUTQVeJBlOZKhbJ787CYHNbMcCnulFVR2y87GHMXHNEGB7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a72d52b503-OSL
content-encoding: br
X-Firefox-Spdy: h2

playit.gg/lib/fa/css/all.min.css

104.26.4.160

200 OK

0 B

URL HTTP/2
playit.gg/lib/fa/css/all.min.css
IP
104.26.4.160:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /lib/fa/css/all.min.css HTTP/1.1
Host: playit.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playit.gg/
Cookie: _ga_XZC0D9DN3J=GS1.1.1669694494.1.0.1669694502.0.0.0; _ga=GA1.2.1037706840.1669694495; _gid=GA1.2.755195886.1669694495; _gat_gtag_UA_159351898_1=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:02:26 GMT
content-type: text/css
last-modified: Tue, 01 Nov 2022 03:06:45 GMT
etag: W/"63608d45-18d4d"
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pz%2Bu6Exs%2F32Ikllbn6TvWastTitYhz%2BThLdHelMmj38dXYjP5gBIptNBMqmJSFz0Ql2JP83Klm61w3sz0CuV%2BnhoKEnpd10ZvP9zntBxZsLGS9LUpcOej5wYxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771872a27b21b503-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (53)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size