Report - goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt

Report Overview

Submitted URL
goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt
IP
185.32.28.169
ASN
#15699 OGIC Informatica S.L.
Submitted
2023-01-30 15:54:28
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	350 B	1.0 kB	54.230.245.100
stats.g.doubleclick.net	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	483 B	446 B	173.194.221.156
notify.dcbprotect.com	112896	2018-06-07T00:28:10Z	2023-03-13T00:03:49Z	507 B	300 B	54.155.29.255
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	65 kB	34.120.237.76
goaserver.com	595430	2019-02-10T13:53:58Z	2023-03-12T17:20:24Z	513 B	438 B	185.32.28.169
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
www.google.no	25607	2016-04-05T21:50:59Z	2023-03-13T06:26:15Z	480 B	578 B	142.250.74.67
region1.analytics.google.com	unknown	2022-03-17T12:26:33Z	2023-03-13T05:11:52Z	1.2 kB	446 B	216.239.32.36
www.googletagmanager.com	75	2013-05-22T04:07:37Z	2023-03-13T08:28:24Z	381 B	46 kB	142.250.74.72
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
af.games4u.mobi	unknown	2021-04-03T19:49:06Z	2023-03-10T02:11:45Z	11 kB	233 kB	87.250.157.188
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	2.1 kB	4.2 kB	142.250.74.131
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.83.200.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 15:54:31	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:31	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:31	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:31	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:32	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:34	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 15:54:37	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt:::	1.1 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 12:32:04 Times Seen1 Hash 0be3980354e435fd2f4592fceffb8f09 a3c57253f4a476ac1ff701fd2078863e637988d5 0c90295c8fc0d730215c0c39ae7d773b40676c8af894e13822c38c656721e25a Loading...

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt:::	456 B	2023-03-08	2023-03-14
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:22:33 Last Seen2023-03-14 19:14:11 Times Seen1 Hash 8640418f43632ba98a668c523b26f6cf 93e44ad65b78b0b42bf318d787308194161c71f6 4fdb01d3d89efd790e2e54ce4f0aa3be1f70f02a0e40fde42c6ffcbaf93c2ea9 Loading...

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js	1.3 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 12:32:04 Times Seen1 Hash aea334d30c54e55b83e3cd7757376236 b1e7bfc78cbc10b5db6f973db572aa36310d5cfb 9c0c60e674c86726521109aa7919c83bc4793c96fb6726ce1bf10a2f2cbff4da Loading...

	af.games4u.mobi/campaignbuilder/build/js/web.bundle.js	244 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/campaignbuilder/build/js/web.bundle.js IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 21:05:39 Times Seen1 Hash 19a538c9fe81455fa10da525a6d65075 da6268ce725f7eb34c741d278d84ece0f26b6759 ad203750fc4dfd22325e43c029b6974a6a11684017dabfe3d36fa3d1428f491b Loading...

	www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV	124 kB	2023-03-13	2023-03-13
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:32:04 Last Seen2023-03-13 12:32:04 Times Seen1 Hash d0c86869e8af7fa021fa3b0ee235cf4d 948ecdc7442c8f4e5f7b6feddf4f21f6465a2486 1dbdc3413e7f43672ad1b62083cb36e0ba472733bee95447fe04bbbc71475177 Loading...

	www.googletagmanager.com/gtag/js?id=G-H5HF2L7MYP&l=dataLayer&cx=c	222 kB	2023-03-13	2023-03-13
Pretty URL www.googletagmanager.com/gtag/js?id=G-H5HF2L7MYP&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:32:04 Last Seen2023-03-13 12:32:04 Times Seen1 Hash de21f6135e87c009f7af52e790c83323 eb6d4ab79556f9949aa78eb134bc48aca1860673 6c32553babd5305fb3b4e551232f1071ef4e25df726cb83db68d11ca47c3b2f3 Loading...

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt:::	92 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:32:04 Last Seen2023-03-13 12:32:04 Times Seen1 Hash bb47f53d915e99678901efdb360a395e 68de16c97af83698393a3871c1141a3e31fe4d76 b9f98c1c0a9c436a1925c013de2ccc1f591436c8152ab63f209502a08178c5e3 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 5e39880343cf6407699381959cfa122e	99 B	2023-03-08	2024-01-26
Pretty Observations First Seen2023-03-08 09:22:33 Last Seen2024-01-26 13:16:37 Times Seen88 Hash 5e39880343cf6407699381959cfa122e 45be8852a79fc4b9d6a0a8ab761b5a6773004230 4b030bb3b3421fd55a0c6da4463e838d3c6d1a41f7f7d8a5ef4883604c7a1160 Loading...

HTTP Transactions (50)

	URL	IP	Response	Size
	goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt	185.32.28.169	200 OK	20 B
URL HTTP/1.1 goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt IP 185.32.28.169:0 ASN #15699 OGIC Informatica S.L. File type data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers GET /tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt HTTP/1.1 Host: goaserver.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1 `HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Jan 2023 15:54:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Refresh: 0; url=https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Content-Encoding: gzip`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 0c35c3ec659d3a26ea97e68d787bb043 d97e3672244efec5b7814f2d8a734cd1a9387854 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8084 Expires: Mon, 30 Jan 2023 18:09:01 GMT Date: Mon, 30 Jan 2023 15:54:17 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 5eb7c9bc996a0ff420e58af45526f053 8c2614832b8efe1c9da0bbd465d6f3f172d95a9e c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4178 Expires: Mon, 30 Jan 2023 17:03:55 GMT Date: Mon, 30 Jan 2023 15:54:17 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash dcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 30 Jan 2023 15:43:12 GMT content-type: application/json age: 665 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3320 Expires: Mon, 30 Jan 2023 16:49:37 GMT Date: Mon, 30 Jan 2023 15:54:17 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: bfuLplQMRlihgElSxbQ8M8O3r05w1B/tmc2ByKRcMBx0uwLJ2wqCm1ll1kzq5KBwpqGaJUsDJ2U= x-amz-request-id: WPREQMAT5NZ6EBXW content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 30 Jan 2023 15:21:50 GMT age: 1947 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:17 GMT content-type: application/json content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 9b93c5772deddd50fa3acc953309544a cbd30aa62a329839ed2550bc2fe650915dc52438 170a86d8082f83b23d592073c287c23dfb0117d0d062f1cfa5d150e2f331d8ce HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "170A86D8082F83B23D592073C287C23DFB0117D0D062F1CFA5D150E2F331D8CE" Last-Modified: Sun, 29 Jan 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21548 Expires: Mon, 30 Jan 2023 21:53:25 GMT Date: Mon, 30 Jan 2023 15:54:17 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 30 Jan 2023 15:41:41 GMT age: 757 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-100.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-100.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15808, version 1.0\012- data Size 16 kB (15808 bytes) Hash 7370c3679472e9560965ff48a4399d0b 7d02b9455622a72bfc55a938a3e6bcccfcd57d0e 12823d585605238121554aff8bb060a235dc36f37efd9fb1e7e6ea1a9622bc35 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-100.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 15808 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3dc0" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data Size 16 kB (15736 bytes) Hash 479970ffb74f2117317f9d24d9e317fe 81c796737cbe44d4a719777f0aff14b73a3efb1e 48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 15736 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3d78" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-700.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-700.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15816, version 1.0\012- data Size 16 kB (15816 bytes) Hash 2735a3a69b509faf3577afd25bdf552e 8621aff863b67040010ccc183da5b9079ce6fd1d b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-700.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 15816 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3dc8" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E" Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2951 Expires: Mon, 30 Jan 2023 16:43:29 GMT Date: Mon, 30 Jan 2023 15:54:18 GMT Connection: keep-alive`

	af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/logo.png	87.250.157.188	200 OK	21 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/logo.png IP 87.250.157.188:0 ASN #15879 KPN B.V. File type PNG image data, 849 x 196, 8-bit colormap, non-interlaced\012- data Size 21 kB (21272 bytes) Hash 8952497245fa0450d43911b0ae4302f0 57528311f43da22bb786a0cea684a1fecb286996 675d23d8c4696e763f8972674b441303194717414e5cda8b9683874296985fcf HTTP Headers GET /campaignbuilder/build/brands/games4u.mobi/logo.png HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: image/png content-length: 21272 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-5318" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/hero.webp	87.250.157.188	200 OK	14 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/hero.webp IP 87.250.157.188:0 ASN #15879 KPN B.V. File type RIFF (little-endian) data, Web/P image\012- data Size 14 kB (14384 bytes) Hash 80f821be0d14103e6620a0688803e729 01a4389c297e89322595b366f0a61c336f3570b9 47d4b52d4201bb82bf84e63618e1256b91b4cd88e223e534fc0b43b104be13ba HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/hero.webp HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: image/webp content-length: 14384 last-modified: Wed, 25 May 2022 12:33:47 GMT etag: "628e222b-3830" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/js/web.bundle.js	87.250.157.188	200 OK	72 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/js/web.bundle.js IP 87.250.157.188:0 ASN #15879 KPN B.V. File type data Size 72 kB (71930 bytes) Hash 6009d5c348d4f256fba38bf030982408 6db69016ed1d5cb4a0d39edb0c011483541831e3 fcf5ab8110a92973ef9578b24ff070b23dd5d9215db9c12d30521b16a31c4afd HTTP Headers GET /campaignbuilder/build/js/web.bundle.js HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/javascript last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-3b7d8" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18372, version 1.0\012- data Size 18 kB (18372 bytes) Hash 133a35226263508aa1a8d7a24577f6c6 c1956cbf071c0eb98c52785e31ec54b3647456ea f7036321e186f09555e2e6a5ffd1b3198a5d9f621e1f600708737f5148841637 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 18372 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-47c4" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18192, version 1.0\012- data Size 18 kB (18192 bytes) Hash 461dc3a0d0fde028a0bc55b0376be45f 32e93bfb2f0a92b1a2bde6ce8fcbc4c95276987d 95c412ec067f0bb6b324d3866ed7899c8e9c8eb9e2c4170290dd1762d4a08857 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 18192 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-4710" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18504, version 1.0\012- data Size 18 kB (18504 bytes) Hash 4a359a06b958c307b76312ed337e2839 d34392477d9f10116e4813af7428788e1b548207 eee08ba32f5ddfd37fd3ff72218a38ef478d2971264a31273e450d30a5ea9d1f HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 18504 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-4848" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v29-latin-900.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v29-latin-900.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15724, version 1.0\012- data Size 16 kB (15724 bytes) Hash 318ee20bc3ab288eaaff82768d2f883b f4a1bb63ac600302e23e8585eb00b6c99f232ed5 0e868ca932480407e63d27e8e868cb1514581142928b9be15ec9039bf5fe348f HTTP Headers GET /campaignbuilder/build/fonts/roboto-v29-latin-900.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/font-woff2 content-length: 15724 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3d6c" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ba2ca6af7b23ce2e11aa4f9d86e66269 212aef55d64b6add292dcf6241b16e7c93d1bae2 f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV	142.250.74.72	200 OK	46 kB
URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV IP 142.250.74.72:0 ASN #15169 GOOGLE File type ASCII text, with very long lines (5867) Size 46 kB (45703 bytes) Hash 117a81a383d300b2ce5a269eaa611442 6b7f3c681c9bb1637578d4389e6aed2d456e9b3f 802b8f4f84f70b7883ffbfe16c3f25ef460df4c6cba09598c6518c1478fb2552 HTTP Headers `GET /gtm.js?id=GTM-5TBFVHV HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Mon, 30 Jan 2023 15:54:18 GMT expires: Mon, 30 Jan 2023 15:54:18 GMT cache-control: private, max-age=900 last-modified: Mon, 30 Jan 2023 15:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 45703 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/favicon.png	87.250.157.188	200 OK	2.1 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/favicon.png IP 87.250.157.188:0 ASN #15879 KPN B.V. File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data Size 2.1 kB (2124 bytes) Hash 32aa0e083926f921a490cfa09dc49112 1bfc98804c6f06426da0feb2e3fde847249de57c 3711c6c645ccba832ab0554ece19168cb1e43d32ee63a378b842c45ef1231f75 HTTP Headers GET /campaignbuilder/build/brands/games4u.mobi/favicon.png HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: image/png content-length: 2124 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-84c" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal01 accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ba2ca6af7b23ce2e11aa4f9d86e66269 212aef55d64b6add292dcf6241b16e7c93d1bae2 f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:18 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	push.services.mozilla.com/	35.83.200.106	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 35.83.200.106:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: B2Fh0gQLt54m1bV+bb0pZw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 7cKa+QOiRxSo9m3mkgRsud9Qu0s=`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 73d6f94eec5f7bf78dc11951011af215 2d7941713a82a83c174bf782b618a6f86a8ab2d7 9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:19 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1&z=536173062	142.250.74.67	200 OK	42 B
URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1&z=536173062 IP 142.250.74.67:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1&z=536173062 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 30 Jan 2023 15:54:19 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash a369a4445d1fccf2ce045c3c4c3f3d67 d6f618e6150a4f9ac6eb5df4a503141a635605a2 d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:19 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.sca1b.amazontrust.com/	54.230.245.100	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 54.230.245.100:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash dc1e74e65148158f0002ce268013fff2 9f86fbb8b537a1b347c616abf534e729d61063e2 48947ec23a7d57b65c41f554a52d936a819b14be02963298c7db8206b18b4e2c HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=139323 Date: Mon, 30 Jan 2023 15:54:19 GMT Etag: "63d75d1b-1d7" Expires: Wed, 01 Feb 2023 06:36:22 GMT Last-Modified: Mon, 30 Jan 2023 06:00:59 GMT Server: ECS (nyb/1D06) X-Cache: Miss from cloudfront Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 0lbg_Hxjb4abzFz64aAtNYqJZk6EDMg1U-DI-8ojjvmstoG9JwCC0w== Age: 2123

	region1.analytics.google.com/g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=240263867&_gaz=1&cid=316707912.1675094072&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675094071&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675094056goa63d7e8281f847%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud	216.239.32.36	204 No Content	0 B
URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=240263867&_gaz=1&cid=316707912.1675094072&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675094071&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675094056goa63d7e8281f847%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud IP 216.239.32.36:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=240263867&_gaz=1&cid=316707912.1675094072&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675094071&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675094056goa63d7e8281f847%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 `HTTP/2 204 No Content access-control-allow-origin: https://af.games4u.mobi date: Mon, 30 Jan 2023 15:54:19 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash e9eba61fbe87bc53d60d0fdd1ba6adb4 8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07 9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:19 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	stats.g.doubleclick.net/g/collect?v=2&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1	173.194.221.156	204 No Content	0 B
URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1 IP 173.194.221.156:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `POST /g/collect?v=2&tid=G-H5HF2L7MYP&cid=316707912.1675094072&gtm=2oe1p0&aip=1 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0` `HTTP/2 204 No Content access-control-allow-origin: https://af.games4u.mobi date: Mon, 30 Jan 2023 15:54:19 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	notify.dcbprotect.com/A844508900587465384444644664260046844826022020466	54.155.29.255	200 OK	20 B
URL HTTP/1.1 notify.dcbprotect.com/A844508900587465384444644664260046844826022020466 IP 54.155.29.255:0 ASN #16509 AMAZON-02 File type data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `POST /A844508900587465384444644664260046844826022020466 HTTP/1.1 Host: notify.dcbprotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 9032 Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/1.1 200 OK Date: Mon, 30 Jan 2023 15:54:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Content-Encoding: gzip`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash e9eba61fbe87bc53d60d0fdd1ba6adb4 8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07 9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 15:54:19 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11796 Expires: Mon, 30 Jan 2023 19:10:56 GMT Date: Mon, 30 Jan 2023 15:54:20 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11796 Expires: Mon, 30 Jan 2023 19:10:56 GMT Date: Mon, 30 Jan 2023 15:54:20 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11796 Expires: Mon, 30 Jan 2023 19:10:56 GMT Date: Mon, 30 Jan 2023 15:54:20 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11796 Expires: Mon, 30 Jan 2023 19:10:56 GMT Date: Mon, 30 Jan 2023 15:54:20 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg	34.120.237.76	200 OK	7.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.7 kB (7679 bytes) Hash 3e04b9eaf7449828136ad59e4c9d69f1 b820be4ed885dcf288eb6460c57e1fa7b1c7c476 df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7679 x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkEtEfHoAMFaNA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:52:09 GMT age: 64931 etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg	34.120.237.76	200 OK	9.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.2 kB (9167 bytes) Hash 3be81f83687ddb6c93d3ff3c09a9dba2 50a48e737310d3f31840db4301b25927fbcc12c5 e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9167 x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fPGLfFtOIAMFp7w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0 x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 20:46:17 GMT age: 68883 etag: "50a48e737310d3f31840db4301b25927fbcc12c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg	34.120.237.76	200 OK	12 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 12 kB (12507 bytes) Hash 5190c0bdc6abe0ee258e9f8c20ddaf51 d60f280f8a742480527dbc32d08f321f972d4fcf 874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 12507 x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhklyFaJoAMFqKA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:54:37 GMT age: 64783 etag: "d60f280f8a742480527dbc32d08f321f972d4fcf" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (10997 bytes) Hash 65c02d8a1b0d6a210cb2a649c5c67469 027dbc7a104c922904f067ed15d696c363c11774 89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10997 x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhj30FX7IAMFa5w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:53:08 GMT age: 64872 etag: "027dbc7a104c922904f067ed15d696c363c11774" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg	34.120.237.76	200 OK	9.5 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.5 kB (9457 bytes) Hash 51aa950d5eed7b90cab6632107092edc e4388ced02e5576867e77547496dec1ac2338ef7 588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9457 x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkBOGHVoAMFQtw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 22:00:38 GMT age: 64422 etag: "e4388ced02e5576867e77547496dec1ac2338ef7" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg	34.120.237.76	200 OK	8.5 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.5 kB (8464 bytes) Hash fe31ee140c2fd62e616c8a1edc9e78bb 7aa5fbdc8156514770ae620e81f1afef1c77890f 799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8464 x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhj3qGeboAMFzNw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:55:21 GMT etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f" content-type: image/jpeg age: 64739 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt:::	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site `HTTP/2 200 OK server: nginx content-type: text/html; charset=UTF-8 vary: Accept-Encoding cache-control: no-cache date: Mon, 30 Jan 2023 15:54:18 GMT set-cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; path=/; HttpOnly device_view=full; expires=Thu, 02-Mar-2023 15:54:18 GMT; Max-Age=2678400; path=/; HttpOnly x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/css/countries.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/css/countries.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/build/css/countries.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: text/css last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-680" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: application/javascript last-modified: Wed, 25 May 2022 12:33:47 GMT vary: Accept-Encoding etag: W/"628e222b-507" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/css/def.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/css/def.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/build/css/def.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: text/css last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-9d80" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: text/css last-modified: Wed, 25 May 2022 12:33:47 GMT vary: Accept-Encoding etag: W/"628e222b-8ec" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/css/brokers.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/css/brokers.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/build/css/brokers.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675094056goa63d7e8281f847&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=bisk6idqlc76pati80k6t2h3p7; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 15:54:18 GMT content-type: text/css last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-a7" x-backend: portal01 content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (50)

URL HTTP/1.1

IP