| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash4b8b051d555b46b1e9e64faebf91b4ab bdab7f1f4146f0e7c16665692e4f1edd83c10a24 e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15791
Expires: Tue, 17 Jan 2023 15:39:43 GMT
Date: Tue, 17 Jan 2023 11:16:32 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashbb0c8d0984a1f09a012961a54cda03c6 1a8ad450a0241554ee4fc7d02fac7b83529e60f6 eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4764
Expires: Tue, 17 Jan 2023 12:35:56 GMT
Date: Tue, 17 Jan 2023 11:16:32 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 17 Jan 2023 10:49:14 GMT
content-type: application/json
age: 1638
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashd6e2abd68203014e8e24d4a9e20e980a 5edbbb1a36083d5077b90b82e7aa10049e90c5d6 88cf8dae194a5e92a8c36a4c54ae71a609eaaed6e99d3986b3834c40d2fceeaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88CF8DAE194A5E92A8C36A4C54AE71A609EAAED6E99D3986B3834C40D2FCEEAA"
Last-Modified: Sun, 15 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11995
Expires: Tue, 17 Jan 2023 14:36:28 GMT
Date: Tue, 17 Jan 2023 11:16:33 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dAgh0gar4qvwW/PdtOoiCAZmtQuwalDlLWoG7H/jsdr58TcC3CAEkLfjasZyYMo9ZLx4onYFgunTtVelWqmJBQ==
x-amz-request-id: CMZQXWYK870WPBHQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 17 Jan 2023 10:56:14 GMT
age: 1219
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 11:16:33 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/ | 192.232.216.177 | 301 Moved Permanently | 0 B |
IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 17 Jan 2023 11:16:32 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://singaporepokerclub.com/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 10:17:25 GMT
age: 3548
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash8720730dce33d0026a1a354ac93d4a7d ed5f086bc646a4d93d2344b19ff7821c96e44f7c b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6448
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:33 GMT
Last-Modified: Tue, 17 Jan 2023 09:29:05 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash1f05b020e426f2b928975af52f3cf325 22f04bdd74492c48c249410878f23a1b8aa9cc75 1a81fbe6f6102b85a6a863adef609e2f9db467472b1a0958526585f0eaf2c7c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A81FBE6F6102B85A6A863ADEF609E2F9DB467472B1A0958526585F0EAF2C7C7"
Last-Modified: Tue, 17 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14755
Expires: Tue, 17 Jan 2023 15:22:28 GMT
Date: Tue, 17 Jan 2023 11:16:33 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 54.148.190.4 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.190.4:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dIcfi0Snjy54NLOqRQ/4pg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eqo9CZPqW7YaWQHmlSp1tWrLe6I=
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash1b2e51abfd12507b00ebd8b7afda6308 4d3d5fa49e007714dd37da7da25d9d490d05bd0a 85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2699
Expires: Tue, 17 Jan 2023 12:01:34 GMT
Date: Tue, 17 Jan 2023 11:16:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6b6a65d2536cc8f99e68793ae265b595 f65e75f8419bd83e26f49def7fa2604db5f77b4d 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2699
Expires: Tue, 17 Jan 2023 12:01:34 GMT
Date: Tue, 17 Jan 2023 11:16:35 GMT
Connection: keep-alive
|
|
| singaporepokerclub.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.1 | 192.232.216.177 | 200 OK | 17 kB |
URL HTTP/2singaporepokerclub.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (63070), with CRLF line terminators Hash9b282959d04287f1e6f372fcf7703c14 d59792fd52f4267955f9c17a3f4a0a31350f19fb 651b13876ef88ef04a8ac0dbb78c01b4a4dcc30906f5b3c07b74725400c18db6
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Aug 2022 06:13:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17088
content-type: text/css
date: Tue, 17 Jan 2023 11:16:34 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.1 | 192.232.216.177 | 200 OK | 468 B |
URL HTTP/2singaporepokerclub.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3412), with no line terminators Hashf88a6a529851c8ed1ffe2bd83219e490 597ff167b702900ee4473e31e390808b8de95664 ae20c6ea52a0534fdda58a7ae13839ac66194434406e00a3bb5f4538f9909886
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Aug 2022 06:13:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 468
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 192.232.216.177 | 200 OK | 5.3 kB |
URL HTTP/2singaporepokerclub.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15660) Hash710f8b142ea44c0682dc2c30f318f065 49144e9b3a76d3d383b1d4359cf7a25e947f4233 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:09:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash1b2e51abfd12507b00ebd8b7afda6308 4d3d5fa49e007714dd37da7da25d9d490d05bd0a 85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdd54f560a77956e0ffb9645ba786c193 0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509 359fd1bdac8f7106b2d1dc71136ddca2bb70e95fab441af114e24d04fa69afe7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7847
x-amzn-requestid: 15cc6d5b-0805-4828-9bdc-5067a2d542d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: evbCYETXoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c2d875-5ff79c917007ccbd40957aa3;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 16:29:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MTdWQGgqXhGjGRJbtMqJPn__CZJyfhtbDU81Ay-SaZE2CGJ55s8Lw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 12:04:57 GMT
age: 83498
etag: "0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg | 34.120.237.76 | 200 OK | 15 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfefb1f12a78ad92ed309da2c54984a3c caf58bf6276e226a20a0d0cf6fc3d422f922eb28 baf6596c635254885f32e423cbc5667694754243f01109cbdbeb54c337b16bc2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04b94725-ff4a-4bda-82a9-4efa8d9c4276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14703
x-amzn-requestid: bdc14ffc-297a-4046-9a4f-26d454f6f9be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2trpGZkoAMFhZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c317-58908dd71980be98200e8f6c;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J674keESjH0GJBC8A6WnCmsHdxNtHNu5pbsv7EwSFSFMcxVCrZeFrw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 02:43:40 GMT
age: 30775
etag: "caf58bf6276e226a20a0d0cf6fc3d422f922eb28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashec0e283376914297c3fb2464ed15a31b acd84e057b6c618fd3b31915983998c00fe21dc4 3d02b82d8f6a00703de7594f5b34baf0010294c1a7023818344ca341e4ac203c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10660
x-amzn-requestid: ac5d6edc-5228-4318-a99f-c08d3265aa87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3HXpH4PoAMF78Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5ec30-044bf7c40e44de637c0c2dba;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 00:30:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkEloLsB0trkJ9t_rqIbVsZmUi9ytfJ9JdQ-zjs7ZM5smU4xVwvkxA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:31:58 GMT
age: 38677
etag: "acd84e057b6c618fd3b31915983998c00fe21dc4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash57828b7affae7633b38d0fb6057b894d db4cd956ba7e1e6b43174c250b7d4f1193277be9 26d83d511af9583a8f0a9ef1bd2ce3deab3ca42fa2c2ae141b61cd123afa9625
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: eac845c9-b10c-4fce-b2ff-01b4111b506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2OjhHp_IAMFeyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c59149-0058376c385a7bf91e07a395;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 18:02:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJvk4N80rrZjzks6MsuDc3XXdRIBAmoEQLVkvN6TXISBtWwXHYDJ_A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 18:44:18 GMT
etag: "db4cd956ba7e1e6b43174c250b7d4f1193277be9"
content-type: image/jpeg
age: 59537
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashad210f0ba6ce6930724549cbba76e83d e4badc3fbca9913bc11d968dac5cad1f900ff492 ad5f754d5dbe870feabfe090a46838614e96d72e78b9a2a8010ab339c67130be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9529
x-amzn-requestid: 56f2b9a5-91c6-421a-ad84-165376e23dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm6Fm-oAMFrDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-67a0c1fe6aad6e6b71e50463;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mzmFGVDfMuZte5CJUmchEQIVAuDUKdGfUpm7PRTUqnsP44IcDmbl8A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 48620
etag: "e4badc3fbca9913bc11d968dac5cad1f900ff492"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7f5c64c-06d8-4527-a53e-4dd0bbe44138.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7f5c64c-06d8-4527-a53e-4dd0bbe44138.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc5cf59ac2200ddefc7b1019ac885adb0 5c3c71108063bfa193b848023ee3e5b17c0df978 785fb702d7a2386ec92e5d33e44cb826d38e21b724df3a7ceedb3a5d05cf9c87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7f5c64c-06d8-4527-a53e-4dd0bbe44138.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8878
x-amzn-requestid: 02bc1bf0-b606-45b1-8f2c-3c1ed274db15
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ezbP5GZtIAMFb9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c47265-30419ed51f5603314bd9e4b6;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 21:38:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Mm0qplBOGJFIpjDa24aFcmKqh4MC9VbVCVWN9jKNFV4Bs3qqLDbvXw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 22:05:20 GMT
age: 47475
etag: "5c3c71108063bfa193b848023ee3e5b17c0df978"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash1b2e51abfd12507b00ebd8b7afda6308 4d3d5fa49e007714dd37da7da25d9d490d05bd0a 85a04d4cf987fcc2d087ab815a8d373e164a2adf2bf478e7a5c1fae3e109ba26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.0 | 192.232.216.177 | 200 OK | 1.1 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (9895) Hashcbb4884776240392ba4f3058a20bd53b 0c71864b2bcc342c090abcea419b658ce8cbf30f 376601ca646b28f39a4e5f3a1f40c1a0fe06dec95231e69d1103a9a83c6701f5
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1060
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.0 | 192.232.216.177 | 200 OK | 4.4 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (26516) Hashfdd462f58aee3f9349eabdefb5ca0b57 bb6e017d5537630516ccb98952593690a8c69864 ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.0 | 192.232.216.177 | 200 OK | 13 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (59158) Hashe6b67e11736ae36a062b381717f2ea9f a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2 a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0 | 192.232.216.177 | 200 OK | 4.0 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19277) Hash121771070c72763b4639003c78a68417 07c6b46f633bd9c27a4c942a478de9fc5baaa0a8 66ecb2c3961530e26dd1054b324423cdcad8d17ef85a50c33b351a8d7cbf5992
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.17.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4018
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/elementor/css/post-475.css?ver=1661971102 | 192.232.216.177 | 200 OK | 435 B |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/elementor/css/post-475.css?ver=1661971102 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1317), with no line terminators Hashdea14cb86d363b04da880368d6b235d4 28258bc5abaaef6e123b0a0401b783397abc0fe2 d31ac3a736825fd1c70792b4394a45de234db190f57bb9f56ca2c64f6fe20233
GET /wp-content/uploads/elementor/css/post-475.css?ver=1661971102 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 18:38:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 435
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 | 192.232.216.177 | 200 OK | 309 B |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (483) Hash0ea43e394ddaae5fdb710dbbc8869e58 3b0c93adc80720236096201db5cc2751e703996d 85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 309
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/elementor/css/post-16.css?ver=1672672035 | 192.232.216.177 | 200 OK | 3.8 kB |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/elementor/css/post-16.css?ver=1672672035 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19957), with no line terminators Hash3231c1bc71c5ab1e9ed05400ca7c7bf9 d36a6dca3c32e445796c411d5322c338cb841655 4e42b8d20b9f81234a92b64a4bf7e1a63ddec01e3a8569c5a70f7fc70c9bf64d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/elementor/css/post-16.css?ver=1672672035 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:07:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3820
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/2020/05/cropped-LogoMakr_8y9dIg-5-188x36.png | 192.232.216.177 | 200 OK | 6.8 kB |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/2020/05/cropped-LogoMakr_8y9dIg-5-188x36.png IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 188 x 36, 8-bit/color RGBA, non-interlaced\012- data Hash1c959a083dd2ed119d4baa0afff858b2 4b241904c4886af870e8beab3c7f9e102103de21 8fbaac63e30990f4f4b79f8c003ee95cf3869abf621c15b4b161ae6dc42ec9e3
GET /wp-content/uploads/2020/05/cropped-LogoMakr_8y9dIg-5-188x36.png HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 02 Jul 2022 13:30:11 GMT
accept-ranges: bytes
content-length: 6821
content-type: image/png
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.0 | 192.232.216.177 | 200 OK | 4.4 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (14869) Hash7bab7ad64ffbd7846dd6819250b93e2e c924918d540389aff62220088b6761f38a5da272 045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 192.232.216.177 | 200 OK | 13 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (57726) Hashdc63c0a8e2d5857cc7a00a4b5456dabb ee29df5eb2a4bf3eb805b160551c1afd84b42599 035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 | 192.232.216.177 | 200 OK | 308 B |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (489) Hash0a08469d24387f830bbaaa00b3c228ae 01f5dfeb8f93a32c9a8f66fe5940758109771fcd 3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0 | 192.232.216.177 | 200 OK | 2.4 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4974) Hashe547f793f6411cf52accd254a51a74e9 a49195a27e246d0bdda528f43786e88f3c65b0a8 ac963d8d4de61882bccf4fd3842f797cf424363c13f984eaaae85f1e3213c91c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2354
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.0 | 192.232.216.177 | 200 OK | 1.2 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2620), with no line terminators Hash55936584085d0d310919b755eda1ab3f be317c3b2ed5143669375295b3107e591bf708da aad2265c39cafa6e01b791b1ef5025a2d237ee91346ef446beb722fdcd578d58
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1187
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 | 192.232.216.177 | 200 OK | 4.2 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10544) Hash552977febe8ef2c71b0806dfaefd2552 01baebfd09383c5d44f066e7b5540fcca6a5eae4 7895907f5a4f54c08c4705b1a194e21c556d68027c5e0a70d4c05b377e712b1d
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4200
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 192.232.216.177 | 200 OK | 3.7 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12198), with no line terminators Hashe2a8decccf4d0a6b925af707a36077a9 26a0febc9c3d91e75410f74b9ec62099ba1cbe90 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 192.232.216.177 | 200 OK | 8.3 kB |
URL HTTP/2singaporepokerclub.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash838560e989767f2ef5951b9eeee20352 6bf8419cb4d68d9beced9e4b79b22b347ae16a46 72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:09:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8344
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0 | 192.232.216.177 | 200 OK | 16 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (40802) Hashdd4a1442bb73e2f1236eedab72e928f8 4f44f4429e53fddbedd389873ddacdaf17c4cd96 5c54410eb9517e459859013d97677e7baf4701f57465c4bdd3dbf30f99a0ac0f
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16265
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0 | 192.232.216.177 | 200 OK | 14 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (35645) Hashbc741e3d27c53d6c88c644a7db97d397 22c6d8166400b00b2d0dd02a61565dc462270668 1f09b274a1505d2f35f592aa9b5b9f33edc72a3604e27a75f636e362232d7b53
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14304
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.232.216.177 | 200 OK | 4.6 kB |
URL HTTP/2singaporepokerclub.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:09:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.1 | 192.232.216.177 | 200 OK | 4.8 kB |
URL HTTP/2singaporepokerclub.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12635), with no line terminators Hashfa569446584f727e1b93fcb4a96df5f4 e540dccf9c15014c1108c56484682df621b1ca65 c6ac2f3443a338ccbba96a23dd14b7a52e31215e6cbd2fe873fcc3bb53a24e45
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Aug 2022 06:13:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4819
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.0 | 192.232.216.177 | 200 OK | 3.0 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10019) Hashc2b5af6052f630a96e450e5e2a3cea52 00ca76a8828a1bbec1534eb10786804fd36492f2 58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| singaporepokerclub.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 192.232.216.177 | 200 OK | 52 kB |
URL HTTP/2singaporepokerclub.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash50980b32876d99ea21489fd551d25acf 4bb6cb5948ac1469a6e19b414549cb522a7cf7d6 9c645206fc8ccaf46cdecea4d82a2e61875056e03d2044f34a46561bd364fc10
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:09:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/2020/05/header-.jpg | 192.232.216.177 | 200 OK | 79 kB |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/2020/05/header-.jpg IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1440x962, components 3\012- data Hash9719e286d1da006ad32565db6e817b32 a502541bc9c3708b708239919fe3ddf41da195ad 72d1a8e46ee583c37d3e8228ae88b29dc28865049499e552c44d8806ba755872
GET /wp-content/uploads/2020/05/header-.jpg HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/wp-content/uploads/elementor/css/post-16.css?ver=1672672035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Sep 2021 17:05:05 GMT
accept-ranges: bytes
content-length: 78878
content-type: image/jpeg
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 192.232.216.177 | 200 OK | 18 kB |
URL HTTP/2singaporepokerclub.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash3e22798e5a9b8201192f0588365ed7ec 53a75cc902d4cc94cfb5effdc630b1ee458034e5 82834e7d7a642754c952ff986f72ac2e9f9b88e175fa17180dc21bb12e022548
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 02 Jan 2023 15:09:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Noto+Sans%3A400%2C700%7CMontserrat+Alternates%3A200%2C&display=fallback&ver=3.9.1 | 142.250.74.106 | 200 OK | 1.3 kB |
URL HTTP/2fonts.googleapis.com/css?family=Noto+Sans%3A400%2C700%7CMontserrat+Alternates%3A200%2C&display=fallback&ver=3.9.1 IP142.250.74.106:0
Hashb916ae5772d8606be40244c9c882c279 248dbcb87d464e816ecf547f30cf1fb0857a819e c890f7c3e677d54acb3536a64a9c6929e1452662cdf7009b031ba573896e5b0d
GET /css?family=Noto+Sans%3A400%2C700%7CMontserrat+Alternates%3A200%2C&display=fallback&ver=3.9.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Jan 2023 11:16:35 GMT
date: Tue, 17 Jan 2023 11:16:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/aldrich/v17/MCoTzAn-1s3IGyJMVacY3w.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/aldrich/v17/MCoTzAn-1s3IGyJMVacY3w.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 16144, version 1.0\012- data Hashac9ae8bf606b6f02edbfab1fe3998fb9 0e117a29eb14307d0bf984c4a8790339c42f460f fce4f3089c3087e61363fcb9134061acf5a26817bb8153ab2e0e5acebe58b45d
GET /s/aldrich/v17/MCoTzAn-1s3IGyJMVacY3w.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://singaporepokerclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 18:53:38 GMT
expires: Mon, 15 Jan 2024 18:53:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:31:14 GMT
content-type: font/woff2
age: 145377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 | 142.250.74.35 | 200 OK | 13 kB |
URL HTTP/2fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data Hashab21c24efd75543e16e34807ebc6cdec eb2562f9729079333fbcbbe94868695669dd3301 88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://singaporepokerclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Jan 2023 15:42:34 GMT
expires: Wed, 10 Jan 2024 15:42:34 GMT
cache-control: public, max-age=31536000
age: 588841
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserratalternates/v17/mFTiWacfw6zH4dthXcyms1lPpC8I_b0juU0xJIbFB7xG.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL HTTP/2fonts.gstatic.com/s/montserratalternates/v17/mFTiWacfw6zH4dthXcyms1lPpC8I_b0juU0xJIbFB7xG.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 20028, version 1.0\012- data Hash1e6b1aeed7383f5944e32050e01c355a b96007ae230c269be79b5f5d3805c43f4720238f 6c19d977dedfbbe3ee9268100d1756344f1d0440b1ee349d7160d0c00c0164ed
GET /s/montserratalternates/v17/mFTiWacfw6zH4dthXcyms1lPpC8I_b0juU0xJIbFB7xG.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://singaporepokerclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 02:57:18 GMT
expires: Tue, 16 Jan 2024 02:57:18 GMT
cache-control: public, max-age=31536000
age: 116357
last-modified: Tue, 26 Apr 2022 16:51:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 | 142.250.74.35 | 200 OK | 9.6 kB |
URL HTTP/2fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 9588, version 1.0\012- data Hash55d912c794126956bb1e8f41597c131f f7ade582dbe9d0efe97ae105cab313c6e45904d4 8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699
GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://singaporepokerclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 04:05:59 GMT
expires: Tue, 16 Jan 2024 04:05:59 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:29:39 GMT
content-type: font/woff2
age: 112236
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 | 142.250.74.35 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data Hash60f23230f1a8d5c3b7d25b73f5b5ce23 ed08ada85d017893b9bcb8224e99154c6708f5d2 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://singaporepokerclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 06:53:46 GMT
expires: Sat, 13 Jan 2024 06:53:46 GMT
cache-control: public, max-age=31536000
age: 361369
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b4c80fca9a7bc1b84369cdb60024668 91427b4fd16fa613fb83f053b271f00396b36e90 07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| singaporepokerclub.com/wp-content/uploads/2020/05/background-1.jpeg | 192.232.216.177 | 200 OK | 149 kB |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/2020/05/background-1.jpeg IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x1500, components 3\012- data Size149 kB (148939 bytes) Hashb40275bc4f66a4b15a4d38ae88bc91de 0fde78d6371c6fd261dded6044a5d38689ab1cac 9bced96160b19a87c520248cb29be322109cc775bb38ffa5834db0bb1a7906ad
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/2020/05/background-1.jpeg HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/wp-content/uploads/elementor/css/post-16.css?ver=1672672035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 03 May 2020 19:32:38 GMT
accept-ranges: bytes
content-length: 148939
content-type: image/jpeg
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 192.232.216.177 | 200 OK | 77 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
content-length: 76764
content-type: font/woff2
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 | 192.232.216.177 | 200 OK | 78 kB |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
content-length: 78196
content-type: font/woff2
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/2022/06/Untitled-design-300x205.png | 192.232.216.177 | 200 OK | 108 kB |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/2022/06/Untitled-design-300x205.png IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 300 x 205, 8-bit/color RGBA, non-interlaced\012- data Size108 kB (108346 bytes) Hashc074f1bc3d33609c8ebe8eee4adeebcf c7540af5011e200457f6619ca22887a75de6cdf9 a809dd4a89b1726817987b50a2f8a6fb5b9cba50974be016aeb9018146e0fa8e
GET /wp-content/uploads/2022/06/Untitled-design-300x205.png HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 07:18:44 GMT
accept-ranges: bytes
content-length: 108346
content-type: image/png
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash6a0c99efce2ba7294ef4b88e9810c411 90e325963c1355d4c2ab6500689850a2df4c419f 957f138460650b9cecf197fb62ec2b92fae42eb5d9d431a348f8f518470612c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| singaporepokerclub.com/wp-content/themes/astra/assets/fonts/astra.woff | 192.232.216.177 | 200 OK | 3.3 kB |
URL HTTP/2singaporepokerclub.com/wp-content/themes/astra/assets/fonts/astra.woff IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format, TrueType, length 3304, version 1.0\012- data Hashbfe0ed8503c926d68f58ed0408dfe0d0 0346d02d96ff7d2a0278bc10f4dfdf365c80eac3 ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Aug 2022 06:13:25 GMT
accept-ranges: bytes
content-length: 3304
content-type: font/woff
date: Tue, 17 Jan 2023 11:16:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/iframe_api | 172.217.21.174 | 200 OK | 960 B |
URL HTTP/2www.youtube.com/iframe_api IP172.217.21.174:0
File typeASCII text, with very long lines (509) Hash756783d450de122680b874b491822f85 837dc533c785bd45afb32975e13559e8c7122181 b7a1c2221d8bb8010d98fa5fde49158e8b4d9dcf0cc0e64fda002cb1d841639f
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Tue, 17 Jan 2023 11:16:36 GMT
date: Tue, 17 Jan 2023 11:16:36 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=XptjmoyyhLY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU0T1RVM09EVXlPRFkwTWpVeE5qRXdOQT09EJSHmp4GGJSHmp4G; Domain=.youtube.com; Expires=Sun, 16-Jul-2023 11:16:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=rDg3__P33YQ; Domain=.youtube.com; Expires=Sun, 16-Jul-2023 11:16:36 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+681; expires=Thu, 16-Jan-2025 11:16:36 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 21:48:03 GMT
expires: Fri, 12 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 394114
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 43 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:0
Hash30a79e7cd39b013f1c2c7b37e7e2caac 81e2e98e00d62edbb09b318ea4cae8bb41385198 dbe552c31fee0cdcb4d7272f44248d663d47aa28862e7d0aac1458c232209a77
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:40:43 GMT
expires: Fri, 12 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 412554
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0cd18c4a19cce4db4c1ee660e9a0a967 a60b429532788a57a53e8674de365ddd84fcf3e4 878401e98ec0ea4de88dad035d00618a4d3f382329f326711f3916b4325aab88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash5acadcbf3fae00f9b2264e396d370c03 5ea4ebce547c95e4b00638ecd5cafc4bb612fe87 d3351be69231434ca6055a0499b0a6f45656ffea44ce09f5795d8f9077360413
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash5acadcbf3fae00f9b2264e396d370c03 5ea4ebce547c95e4b00638ecd5cafc4bb612fe87 d3351be69231434ca6055a0499b0a6f45656ffea44ce09f5795d8f9077360413
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0cd18c4a19cce4db4c1ee660e9a0a967 a60b429532788a57a53e8674de365ddd84fcf3e4 878401e98ec0ea4de88dad035d00618a4d3f382329f326711f3916b4325aab88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.134 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.134:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 11:02:35 GMT
expires: Tue, 17 Jan 2023 11:17:35 GMT
cache-control: public, max-age=900
age: 843
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/id | 216.58.211.2 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP216.58.211.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 17 Jan 2023 11:16:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/uploads/2022/06/Untitled-design-2-1024x700.png | 192.232.216.177 | 200 OK | 0 B |
URL HTTP/2singaporepokerclub.com/wp-content/uploads/2022/06/Untitled-design-2-1024x700.png IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2022/06/Untitled-design-2-1024x700.png HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 07:24:59 GMT
accept-ranges: bytes
content-length: 660106
content-type: image/png
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/id | 216.58.211.2 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP216.58.211.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 17 Jan 2023 11:16:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.207.234 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash90fc7ea27dd093ca322ed03219db4dad ce25577bf36f6d425089f1b50cb24b1c075594d6 b98e144fb520ebe82bc7117d6a8ab67c89d15b125cf5557654f4ea67ee8027cc
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 17 Jan 2023 11:16:38 GMT
server: ESF
cache-control: private
content-length: 30815
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash5acadcbf3fae00f9b2264e396d370c03 5ea4ebce547c95e4b00638ecd5cafc4bb612fe87 d3351be69231434ca6055a0499b0a6f45656ffea44ce09f5795d8f9077360413
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0cd18c4a19cce4db4c1ee660e9a0a967 a60b429532788a57a53e8674de365ddd84fcf3e4 878401e98ec0ea4de88dad035d00618a4d3f382329f326711f3916b4325aab88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash6b70b334388cc7c3c2afbf53572e9dca c4c5b6f3cf3dc8b3cbadcb45fd578ecfcb406eb1 d231560628e5028fb74b132e6de1562cecbc1fc4ab4fc96c8fce638beb8ddbc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 216.58.207.234 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash59bee6bf84e11a8ad50045109e8c5105 3ca7cbdb9d782c7e7be887e48f1f74996ecdeaab 0f4d9bc13792dfc4e06fa40da072550488deb211944237f7a5724a6f7df72579
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 17 Jan 2023 11:16:38 GMT
server: ESF
cache-control: private
content-length: 30678
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash2eda63bdf986379942db2faa0a205498 3021e93ccc0dc479720e0fc06dcfea20462bf67a b1cb3d075a49fe5721b9ee08d7081e64c590b6d07fa9ba9a58e115ccdff72512
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js | 142.250.74.132 | 200 OK | 14 kB |
URL HTTP/2www.google.com/js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js IP142.250.74.132:0
File typeASCII text, with very long lines (36008) Hash8a1e64e80c9189aaa07733ae98ea030b de788d5e003c05a2b43c8f16557e6a4f27eb00ff cdfd098bd8fb947a53ebeaf0e8e0bdd0d6a31eb6a7c0e1403331403cc48a5a1e
GET /js/th/J0Wtb-3apQjiEgHhOVup9kp7pTLa1a3i127gprViyoA.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14261
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 22:29:07 GMT
expires: Thu, 11 Jan 2024 22:29:07 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
age: 478051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.207.234 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.207.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 17 Jan 2023 11:16:38 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.207.234 | 200 OK | 114 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with no line terminators Hash5a8b683feeb4e19173be4b427828d51f 24331933c93098847500c043b48bf7400139ca49 aa78a7fccc15cbbbcdb516fe484db848d6406511da6b71f16920d3ffe3f624e4
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1040
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 17 Jan 2023 11:16:38 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 216.58.207.234 | 200 OK | 110 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP216.58.207.234:0
File typeJSON data\012- , ASCII text, with no line terminators Hashef71dd8bf581aab46de3f7f683a11e7c d801f0652efa8cb0ee551dc733ed2f63a83920a4 3c1b1cd84561c8595b79d82f18a7ba1bc11f3c4f7dc3dc351f50a0407faf5d66
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 887
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 17 Jan 2023 11:16:38 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash888d3d5e7136297f3c37173b5ab1711c a33b3b019cffc3acd178c153cc0d7e32cc9ccdd9 69621f1ff9ed607b2dd09579cc9cc9e2f45ba108af72bc1c5f43fe4fac06df08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash888d3d5e7136297f3c37173b5ab1711c a33b3b019cffc3acd178c153cc0d7e32cc9ccdd9 69621f1ff9ed607b2dd09579cc9cc9e2f45ba108af72bc1c5f43fe4fac06df08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 | 91.90.45.172 | 200 OK | 1.1 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1072), with no line terminators Hash1762398cda7c7a5305c34a51606d6d0c 39c29e6fac9d2fab59e54f700d8040923ee8b290 052ed877131e6258df1388c4512bbd091ceda76a1bde25eb51b5e861a89d8b59
POST /videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1072
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&range=0-65835&rn=2&rbuf=0 | 91.90.45.172 | 200 OK | 1.0 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&range=0-65835&rn=2&rbuf=0 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1033), with no line terminators Hashd2bed3d7c1ddb2552b8f07daee56d328 9c481de6280ba1ae74e48c28ef0c1872480b6c9c ffbaf1d13749ff3a72e3969e4df7361e92a91e055b5b04a76e85dcf2b0255917
POST /videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&mh=Yb&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hnekn7l&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1472500&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&mt=1673953734&fvip=5&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgD7LLleCjbso2JMpEOpN6qps0xZeJ1NI3pdmTV9p5Dj0CIQDKpK2FLrmSKIuOAbjU8GqLzdtGAQlwhtH-Jk8AGTrojw%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&range=0-65835&rn=2&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1033
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&range=0-322&rn=2&rbuf=0 | 91.90.45.173 | 200 OK | 1.0 kB |
URL HTTP/1.1rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&range=0-322&rn=2&rbuf=0 IP91.90.45.173:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1026), with no line terminators Hashb28ff7bc0330c7beea5360b3ab253cbf ca22910a147aa681ff6a7581809bf19f933c7f4b b6c39d64c0c1cacb67bc82ef099b480112ad4780415290ce9a8b888f358fde4f
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&range=0-322&rn=2&rbuf=0 HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1026
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 | 91.90.45.173 | 200 OK | 1.1 kB |
URL HTTP/1.1rr2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 IP91.90.45.173:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1072), with no line terminators Hash589244aeb06bc97564cca48cdd227881 722b1dacad2dc1943f6ec67b5cd255df7a2fd4d2 966118d1c8eaab85c91504feb2e4fdb3656e8260bd43cee2fa5519b7933c11de
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&mh=o5&mm=31%2C29&mn=sn-capm-vnae%2Csn-5hne6nzy&ms=au%2Crdu&mv=m&mvi=2&pl=21&initcwndbps=1472500&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&mt=1673953734&fvip=3&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAKUcrB9RyhJC7F42eCaV4tuOs91dPSGNTvp8ycfIovICAiAgw0rAKnWDRO1EiBwxhici_K9rOXt_XFkXyVuh5ySBzg%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&sq=0&rn=1&rbuf=0 HTTP/1.1
Host: rr2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1072
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash888d3d5e7136297f3c37173b5ab1711c a33b3b019cffc3acd178c153cc0d7e32cc9ccdd9 69621f1ff9ed607b2dd09579cc9cc9e2f45ba108af72bc1c5f43fe4fac06df08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash888d3d5e7136297f3c37173b5ab1711c a33b3b019cffc3acd178c153cc0d7e32cc9ccdd9 69621f1ff9ed607b2dd09579cc9cc9e2f45ba108af72bc1c5f43fe4fac06df08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yt3.ggpht.com/mMK8-b_ZefTRWistyJuMoJvyxsW69zjJtalpQXanKbAZiJGTpXAkni5SYOtj1rNSckamX0aD=s68-c-k-c0x00ffffff-no-rj | 142.250.74.65 | 200 OK | 3.6 kB |
URL HTTP/2yt3.ggpht.com/mMK8-b_ZefTRWistyJuMoJvyxsW69zjJtalpQXanKbAZiJGTpXAkni5SYOtj1rNSckamX0aD=s68-c-k-c0x00ffffff-no-rj IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data Hash6ba7fcfe73d45d6f11198aa655ccbc51 8c72b7cb2288bc79e1b92a43e83482f6df5b3a0e 78530ea4e2e2b97b238bd1dd1bcfbd7456e800d6a474f5736d6806a76048526a
GET /mMK8-b_ZefTRWistyJuMoJvyxsW69zjJtalpQXanKbAZiJGTpXAkni5SYOtj1rNSckamX0aD=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Wed, 18 Jan 2023 11:16:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="channels4_profile.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 17 Jan 2023 11:16:38 GMT
server: fife
content-length: 3599
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0f3190bee5846f8ae4cb56db9a56d5ab dac0237dbf30632efe98716c7040a855debccf4e a7f9d3a25b843c8abedd9c1b02cf37cbcb429a54f83465b2f879bf090bae6018
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash2eda63bdf986379942db2faa0a205498 3021e93ccc0dc479720e0fc06dcfea20462bf67a b1cb3d075a49fe5721b9ee08d7081e64c590b6d07fa9ba9a58e115ccdff72512
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash763c4de56e8e3449e90be88747736aa7 07836b64f8af959690c98abce137048caf0cef0c c4c75b95d99d67e43c52d93c7196d2db8d1ada17f26e82c30e926a3b472093d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash763c4de56e8e3449e90be88747736aa7 07836b64f8af959690c98abce137048caf0cef0c c4c75b95d99d67e43c52d93c7196d2db8d1ada17f26e82c30e926a3b472093d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMvnvWgeI8pZ_IyKkKb1dsOVSJZdJuu7YkpfX0cAHlUlAiEAxuXI7eHm8qTRz6c1H9GFmwLE1ozyJgJ8yf1bHLFWK4k%3D&sq=0&rn=3&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= | 74.125.100.10 | 200 OK | 1.2 kB |
URL HTTP/1.1rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMvnvWgeI8pZ_IyKkKb1dsOVSJZdJuu7YkpfX0cAHlUlAiEAxuXI7eHm8qTRz6c1H9GFmwLE1ozyJgJ8yf1bHLFWK4k%3D&sq=0&rn=3&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= IP74.125.100.10:0
File typeASCII text, with very long lines (1225), with no line terminators Hasheba2922ceac9b6226970f352b8ab38c1 10e7c8dd5bbf991a923f5ded7a1a5f2432908585 a04cfb85ce6222e4be129883ddc2580b7beb42f3bf06773d19d98c8ece51f333
POST /videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=yt_otf&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=video%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&otf=1&otfp=1&dur=0.000&lmt=1656575415229247&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRAIgHsYOFB2l7FuS1S6dF7hPIA9HwVAUfRltNg4NfGNrjxsCIDHHdbj65mpfjQ2QdwU_2y3QWKENRI8DSBUR3FyZxWYW&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAMvnvWgeI8pZ_IyKkKb1dsOVSJZdJuu7YkpfX0cAHlUlAiEAxuXI7eHm8qTRz6c1H9GFmwLE1ozyJgJ8yf1bHLFWK4k%3D&sq=0&rn=3&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= HTTP/1.1
Host: rr5---sn-5hnekn7l.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1225
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr3---sn-5hneknes.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgEv1rDxGO3K7ueCvTJ1WzaaQsZlrKh46nMgyKQ3zZ1jACIC5A6p76fGWdpxjlpLvE20mxQ8Rx_zj6W5ESzUYZ4v2V&sq=0&rn=4&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= | 74.125.8.200 | 200 OK | 1.2 kB |
URL HTTP/1.1rr3---sn-5hneknes.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgEv1rDxGO3K7ueCvTJ1WzaaQsZlrKh46nMgyKQ3zZ1jACIC5A6p76fGWdpxjlpLvE20mxQ8Rx_zj6W5ESzUYZ4v2V&sq=0&rn=4&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= IP74.125.8.200:0
File typeASCII text, with very long lines (1237), with no line terminators Hash1d1b307f07aa0e1660b33196351104d5 5d43a404fda5534d01e5406ffdb3b7ba6481666b 24a7394bd8cb0a01c14c33a73136e3c081310fea84f8e01448e83bd025a285c0
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgEv1rDxGO3K7ueCvTJ1WzaaQsZlrKh46nMgyKQ3zZ1jACIC5A6p76fGWdpxjlpLvE20mxQ8Rx_zj6W5ESzUYZ4v2V&sq=0&rn=4&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= HTTP/1.1
Host: rr3---sn-5hneknes.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Tue, 17 Jan 2023 11:16:38 GMT
Expires: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1237
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| i.ytimg.com/vi/76_q6GM-Ax0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCUgEyh_MA8=&rs=AOn4CLB27A3F2BAWXwD7-5l524gRGI1YSA | 142.250.74.182 | 200 OK | 92 kB |
URL HTTP/2i.ytimg.com/vi/76_q6GM-Ax0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCUgEyh_MA8=&rs=AOn4CLB27A3F2BAWXwD7-5l524gRGI1YSA IP142.250.74.182:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data Hash245801dbf69c6bb49e978faf375f2a13 0f7ea49ff7628205f505f2427f59f193d64a307f 6e05434ab1a8ffc5d67ea66f8e2ee2e77c1dded4006e50a492b8f69c609a261b
GET /vi/76_q6GM-Ax0/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCUgEyh_MA8=&rs=AOn4CLB27A3F2BAWXwD7-5l524gRGI1YSA HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 91958
date: Tue, 17 Jan 2023 11:16:38 GMT
expires: Tue, 17 Jan 2023 13:16:38 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| rr3---sn-5hneknes.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANMVip0X-uI9Vbk3v6AWE6QOfqI_f11o9Zsj9NVY8DPEAiEA1HYSeULM6MNGQgjYqJjVNvSfT-a8RS7Z6eItGUSP8Nw%3D&range=0-322&rn=3&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= | 74.125.8.200 | 200 OK | 323 B |
URL HTTP/1.1rr3---sn-5hneknes.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANMVip0X-uI9Vbk3v6AWE6QOfqI_f11o9Zsj9NVY8DPEAiEA1HYSeULM6MNGQgjYqJjVNvSfT-a8RS7Z6eItGUSP8Nw%3D&range=0-322&rn=3&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= IP74.125.8.200:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hashfd650b1d68d8c9c79c7bb7e84c2a5a41 c300890a32be8dc56cc4fd16438ef0a8d8c5ef7d 0a4b4ea75b2562ccbccb576c13afe626a8e4f3a6768d11a6d3be6a48aac7745f
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=251&source=youtube&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=audio%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&gir=yes&clen=14807&otfp=1&dur=32.081&lmt=1656570941129994&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAMheGyEFA6igcPDjzo4ImIFcmM3OG5cyuZ90fwJ0z8AbAiEAkebCnbCxoDgzNztPPkJvhClELgc5XaumKqAMjIhIKmw%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7l&cms_redirect=yes&cmsv=e&mh=o5&mm=29&mn=sn-5hneknes&ms=rdu&mt=1673953992&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhANMVip0X-uI9Vbk3v6AWE6QOfqI_f11o9Zsj9NVY8DPEAiEA1HYSeULM6MNGQgjYqJjVNvSfT-a8RS7Z6eItGUSP8Nw%3D&range=0-322&rn=3&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= HTTP/1.1
Host: rr3---sn-5hneknes.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 30 Jun 2022 06:35:41 GMT
Content-Type: audio/webm
Date: Tue, 17 Jan 2023 11:16:39 GMT
Expires: Tue, 17 Jan 2023 11:16:39 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 323
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| i.ytimg.com/vi_webp/-yWqkzFZHec/maxresdefault.webp | 142.250.74.182 | 200 OK | 39 kB |
URL HTTP/2i.ytimg.com/vi_webp/-yWqkzFZHec/maxresdefault.webp IP142.250.74.182:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash28c16acc8b72a16ad74af51348a944c4 c246a4c4e5fdfa269eab666505aeaab4bd151d00 5ee7f4215c860bd0a1e79dc0b2d99d35d4a99e73e43711fe4fc8756dfee2449f
GET /vi_webp/-yWqkzFZHec/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 38780
date: Tue, 17 Jan 2023 11:16:38 GMT
expires: Tue, 17 Jan 2023 13:16:38 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash763c4de56e8e3449e90be88747736aa7 07836b64f8af959690c98abce137048caf0cef0c c4c75b95d99d67e43c52d93c7196d2db8d1ada17f26e82c30e926a3b472093d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0f3190bee5846f8ae4cb56db9a56d5ab dac0237dbf30632efe98716c7040a855debccf4e a7f9d3a25b843c8abedd9c1b02cf37cbcb429a54f83465b2f879bf090bae6018
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash763c4de56e8e3449e90be88747736aa7 07836b64f8af959690c98abce137048caf0cef0c c4c75b95d99d67e43c52d93c7196d2db8d1ada17f26e82c30e926a3b472093d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 11:16:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAJQ5ohnFrKmzJVVOE2WjNL6RpFfmLNmyDlTvRWxJXlaDAiEAqewjmfAd8bWfqqXYmgnATaBYSHsNFrc6IEHSwhxh0kw%3D&range=0-65835&rn=4&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= | 74.125.100.10 | 200 OK | 66 kB |
URL HTTP/1.1rr5---sn-5hnekn7l.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAJQ5ohnFrKmzJVVOE2WjNL6RpFfmLNmyDlTvRWxJXlaDAiEAqewjmfAd8bWfqqXYmgnATaBYSHsNFrc6IEHSwhxh0kw%3D&range=0-65835&rn=4&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= IP74.125.100.10:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hash3b096851cdca561209a619b32b9b3e7f de8d23a7ca49f206f360e255fdd90d2a10f5885a 5815486a3be8de916d3ebacd42002fb568a9bbf9b550a9927a69f3644e7ec57b
POST /videoplayback?expire=1673975798&ei=loPGY-2_EtPUyAW_-5fIAw&ip=91.90.42.154&id=o-AMkrUsgdoLkBo7GA8nMwfx718TNFp29gFfdJ0RhVgXeg&itag=251&source=youtube&requiressl=yes&spc=zIddbFzknOLBuVYnC8cK7IY-x1jSaz0&vprv=1&mime=audio%2Fwebm&ns=zHw_00eHopi4rZZfbuLmUSQK&gir=yes&clen=283595&otfp=1&dur=16.641&lmt=1656575413442783&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6211224&n=yie5ZLNlZEzgHw&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIhAO3oBL-4ur9NoQiUu0cc_TyrBYF1TFxvpda4kZ4PuD5aAiA-vRvqyP2TZ8TWxHHiJMkgYkkvECs_VyjVM-ly3KPuxA%3D%3D&alr=yes&cpn=IJ665TRKXZTe8gb9&cver=1.20230111.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=Yb&mm=29&mn=sn-5hnekn7l&ms=rdu&mt=1673953992&mv=m&mvi=5&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAJQ5ohnFrKmzJVVOE2WjNL6RpFfmLNmyDlTvRWxJXlaDAiEAqewjmfAd8bWfqqXYmgnATaBYSHsNFrc6IEHSwhxh0kw%3D&range=0-65835&rn=4&rbuf=0&pot=D35p_tOfLL3HflEDuFvwLOEHtXV0cnZsZ2CoM8V0vX1OaZrJpWRMGdKNwLvGhNRwsCZpLsNgIJPovf_nCvJlxyeWVCnbJ5EGzv_ndv3xA0JpQikZuUQ6WvjC8hooJVJoI70d56c= HTTP/1.1
Host: rr5---sn-5hnekn7l.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 30 Jun 2022 07:50:13 GMT
Content-Type: audio/webm
Date: Tue, 17 Jan 2023 11:16:39 GMT
Expires: Tue, 17 Jan 2023 11:16:39 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 65836
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr3---sn-5hne6nzy.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=0&rn=5&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= | 172.217.132.168 | 200 OK | 299 B |
URL HTTP/1.1rr3---sn-5hne6nzy.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=0&rn=5&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= IP172.217.132.168:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hashe024967dbb0e6f3c423419fd3bb57abb 6fee7eea8b8fadbe27e23eb011d8f46348b96fa0 26f0536fbaf90b3b46a4c63947c03c857d25b038ee84fdc973837eea1c69f0e8
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=0&rn=5&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= HTTP/1.1
Host: rr3---sn-5hne6nzy.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 20 Dec 2022 02:30:46 GMT
Content-Type: video/webm
Date: Tue, 17 Jan 2023 11:16:39 GMT
Expires: Tue, 17 Jan 2023 11:16:39 GMT
Cache-Control: private, max-age=21299
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr3---sn-5hne6nzy.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=1&rn=8&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= | 172.217.132.168 | 200 OK | 61 kB |
URL HTTP/1.1rr3---sn-5hne6nzy.googlevideo.com/videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=1&rn=8&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= IP172.217.132.168:0
Hashb8dc7c16aaa4c1fb4175a1cd3281c8d0 fdc7a1fa8a09a94bcfbd0641466e8114fc502acf d041d218b00d8e6289eebac93903f95dc99b1efd9478f7bd58f98841afe69efa
POST /videoplayback?expire=1673975798&ei=loPGY6uODIGIpATm15lY&ip=91.90.42.154&id=o-AMT_iTx3mXQJMpgOR6hppk6e5wXRjoHcgF2dcItCW5PJ&itag=244&aitags=133%2C134%2C135%2C136%2C160%2C242%2C243%2C244%2C247%2C278%2C298%2C302&source=yt_otf&requiressl=yes&spc=zIddbPuJcnrPLfdkNd8kw5uKDUVsK78&vprv=1&mime=video%2Fwebm&ns=nOKfZMWId9fXvavEmRgUD_4K&otf=1&otfp=1&dur=0.000&lmt=1656570956807240&keepalive=yes&fexp=24007246&c=WEB_EMBEDDED_PLAYER&txp=6210224&n=3CS8A7lcqnHHwA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cotf%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRQIgQeXgI-QkmmIjp_FywNch7C5JGDiXG7pNbmKs5FjeLesCIQDILuWlt3z17cPUX6M6GcYqJBa44c-fEED0J1Zm7fap6g%3D%3D&alr=yes&cpn=az3ciySgGoOJRU4z&cver=1.20230111.01.00&cm2rm=sn-capm-vnae7l,sn-5hnesk7s&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=o5&mm=34&mn=sn-5hne6nzy&ms=ltu&mt=1673953966&mv=m&mvi=3&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIkhQWl4zN_NrCnO_YLrxcpgQiSVqakl-snr_H-YUFCyAiA1rKYQKSE5dSyM7sEaE9MS9uIujmPCS4qDiQy8KupbYg%3D%3D&sq=1&rn=8&rbuf=0&pot=DxOyzHy5WRERE4ntC7u7yTDGD9IXBvV7TNYIL0IYFAdHA29EDIJNtIwaCn_xjsC-Oa3YJhFE9ZFHnNjnWIxZYm7CkNjK4pNWNoRIzxa_w_51jjfIlOYokkZbYiDUMlvLIM4YzxCPd9o= HTTP/1.1
Host: rr3---sn-5hne6nzy.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 20 Dec 2022 02:30:47 GMT
Content-Type: video/webm
Date: Tue, 17 Jan 2023 11:16:40 GMT
Expires: Tue, 17 Jan 2023 11:16:40 GMT
Cache-Control: private, max-age=21298
Transfer-Encoding: chunked
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash805a998e9a6fc452c152ab9542b6d0cd 0bd57ea7809abfa4136506f565ac8ba45c936406 b24e0b322cacda63e43582e713cb38d80914f6b82c735307188a2ddd9829338f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10736
x-amzn-requestid: 78c83dbb-f641-4ece-bd8d-ce9d524f100d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm5FLvoAMFn1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-73b261b87d3eb7b709161fdf;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hUS-ajMYSYKXI2jsZJApvgUgr0lnbrm02BXZ6rsPS5h0daBcIRtgEw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 48626
etag: "0bd57ea7809abfa4136506f565ac8ba45c936406"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/ | 192.232.216.177 | 200 OK | 0 B |
IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
link: <https://singaporepokerclub.com/wp-json/>; rel="https://api.w.org/", <https://singaporepokerclub.com/wp-json/wp/v2/pages/16>; rel="alternate"; type="application/json", <https://singaporepokerclub.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 17 Jan 2023 11:16:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 192.232.216.177 | 200 OK | 0 B |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| singaporepokerclub.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.0 | 192.232.216.177 | 200 OK | 0 B |
URL HTTP/2singaporepokerclub.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.0 IP192.232.216.177:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.10.0 HTTP/1.1
Host: singaporepokerclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 09 Jan 2023 18:35:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 17 Jan 2023 11:16:35 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPlayfair+Display%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAldrich%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPlayfair+Display%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAldrich%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 IP142.250.74.106:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPlayfair+Display%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAbel%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAldrich%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://singaporepokerclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Jan 2023 11:16:35 GMT
date: Tue, 17 Jan 2023 11:16:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
0.0.0.0