r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 210a2a42cfc4f4aced144f5de9babcc6
ece6ecfb2db8d036c3bfc7f02f8ea387e3f965db
59553a312d3fb34f1f0aea469f7e7cc810ff9993481ddbd73ea5d461cf97ed51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9187
Expires: Thu, 23 Mar 2023 07:35:48 GMT
Date: Thu, 23 Mar 2023 05:02:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9232
Expires: Thu, 23 Mar 2023 07:36:33 GMT
Date: Thu, 23 Mar 2023 05:02:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 04:15:05 GMT
content-type: application/json
age: 2856
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12032
Expires: Thu, 23 Mar 2023 08:23:13 GMT
Date: Thu, 23 Mar 2023 05:02:41 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: J9/8jWEhq3Vtm1wGqU1oemci6kxSi80+I1Y6S3Gq3qkeVcEey79Wwl1UXB7qBM/thCmnRPA/VTM=
x-amz-request-id: Z7V9KEAFVTSYJ0WJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 04:53:55 GMT
age: 526
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:42 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
200 OK 172 kB URL HTTP/1.1 www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1463)
Size 172 kB (171511 bytes)
Hash b0dc1b8457ef47a6755828cf4358a599
0ef63e8455b5d196a0154b84e74648b1b19810f4
59ed0d32a6f64d4fb5c8446b9c0cd32989c3b0595b401c4a26f4b5a0fefda708
GET /how-to-play-com.netmarble.solol-on-pc.html HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Date: Thu, 23 Mar 2023 04:27:34 GMT
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xrP_C23m9OCfer6L0P0sj4mdOPVdT2QsDu94DA29HPym5WB-tY4-cw==
Age: 2108
www.memuplay.com/home/Public/css/swiper-3.4.2.min.css
200 OK 18 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/swiper-3.4.2.min.css
IP
File type ASCII text, with very long lines (17459)
Hash 6af34d0737ad0ca608111771cf74cc79
15d0417baa08a741c6aee19fdfbf4813635f98f8
47b0e7129add982c0e394f0dfa8d9621e6c9e4126859b26e1ad25c18def0d812
GET /home/Public/css/swiper-3.4.2.min.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 17759
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 04:11:21 GMT
Expires: Thu, 23 Mar 2023 05:03:56 GMT
Cache-Control: max-age=3600
ETag: "5dbd2955-455f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: t0Bv_-SVx4dolVFxAcu_HSilnHrDbW537NHFHOwcLoE1QBb5rpdY5g==
Age: 3526
www.memuplay.com/home/Public/css/napps.css
200 OK 46 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/napps.css
IP
Hash db1924fe82b3f6181299dd7a05e1171c
e11c0d70a67c1c7f93d255e16edb5c5b71b8f2c7
35364a1c909f82cabd7042a0fdae894f480155155e1406b909a8bbf199568d9c
GET /home/Public/css/napps.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 46350
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Wed, 01 Feb 2023 09:01:48 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 05:28:15 GMT
Cache-Control: max-age=3600
ETag: "63da2a7c-b50e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2y2a3hOIzQ3-VY5Nxw4EFY-prEXERlSNTdNM_ZbnEYv7ZkMdCyfrVQ==
Age: 2067
www.memuplay.com/home/Public/css/public.css
200 OK 19 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/public.css
IP
Hash 6af4607a849d6914f660602744d89329
3aa5ce4339c36d266dba2581a3797fdc170d9e2c
d87cb55915acdae85bb18fadc88fe04f027fdff455b679c7116d07d6d43af76f
GET /home/Public/css/public.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 19408
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Mon, 25 Jul 2022 03:58:34 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 06:01:25 GMT
Cache-Control: max-age=3600
ETag: "62de14ea-4bd0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6fKnNb6opH3LU9_cGnfVj1tMb-po5ESrohKlfzaVRQd2iQ9rn9uyog==
Age: 77
www.memuplay.com/home/Public/img/gp_logo_dark.png
200 OK 4.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/gp_logo_dark.png
IP
File type PNG image data, 183 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e96b2177f0b7d59d9b79d51ab43fb34
b48d1a54d81fb8b9eace2c92e5e04909ed3c7306
6cdcbabefa22d9c14b4bb467d71999a9b1ad50914f34c0ea0c1ebd6e332e250c
GET /home/Public/img/gp_logo_dark.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4161
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Tue, 29 Sep 2020 02:51:16 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 02:51:24 GMT
Expires: Fri, 21 Apr 2023 06:36:06 GMT
Cache-Control: max-age=2592000
ETag: "5f72a124-1041"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: C5UT0-bfVftAAKYEMMYpx3UGmYpREeKIMlaJr7uBYXGm59NHggD4Lw==
Age: 80796
www.memuplay.com/home/Public/js/libs/swiper-3.4.2.jquery.min.js
200 OK 87 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/swiper-3.4.2.jquery.min.js
IP
File type ASCII text, with very long lines (32000)
Hash d7749c8a97e6513c348d34998ffd4f9c
5454d61c1a9d2c3e97a0dcd3fcb42bb41b110a9b
3e5eb7885cd58a769515cdd0aab42fab70e2985d5f78fe96a9e926e634da6d7a
GET /home/Public/js/libs/swiper-3.4.2.jquery.min.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 86923
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 05:25:38 GMT
Cache-Control: max-age=3600
ETag: "5dbd2955-1538b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Cdz5hHMzuO7tux_IE1D9RvLA09k_fncpfcvO2SJ1r6nqeYTdoB6nPA==
Age: 2224
www.memuplay.com/home/Public/js/libs/jquery-1.11.0.min.js
200 OK 96 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 52d16e147b5346147d0f3269cd4d0f80
4566b5815f47f976c7c3d3083c600ad5561b6fc0
2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17
GET /home/Public/js/libs/jquery-1.11.0.min.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 96380
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 05:37:55 GMT
Cache-Control: max-age=3600
ETag: "5dbd2955-1787c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fAoiTpHiPrt_eB45AdACZOTLfWh5zLvJPorf37O_JWxjTHRCStVpqQ==
Age: 1487
www.memuplay.com/home/Public/js/libs/jquery.lazyload.js
200 OK 5.6 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/jquery.lazyload.js
IP
File type ASCII text, with CRLF line terminators
Hash 203331c5ee8e3f19a17663c915a161f6
2eb6f854159cc5aafe23dded2a421ee3b2ec6129
c02be89b2ec96232ab4f8abb022f03e4613a6676d245b0be38bb357835a95b67
GET /home/Public/js/libs/jquery.lazyload.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 5649
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 05:40:16 GMT
Cache-Control: max-age=3600
ETag: "5dbd2955-1611"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: t50EfJ4WBfxHqISjuxeYR554Y5VQpuThDWpy_fEVt_RuTfyjI5O7sw==
Age: 1346
www.memuplay.com/home/Public/js/public.js
200 OK 3.0 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/public.js
IP
File type HTML document, ASCII text
Hash 89dbc462a2f0c8badbf1d2d3d6d25182
e96f19ffc7a5a7d9dc459a37bb079b8ee7e78cff
8d0b7961aa9f703d352bf481f9bc493aa889faaefde5f4b2977e7106a7baa073
GET /home/Public/js/public.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2951
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 23 Jul 2020 09:34:06 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Thu, 23 Mar 2023 05:31:23 GMT
Cache-Control: max-age=3600
ETag: "5f19598e-b87"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GRvcd5kbKncVMcwrgQdxv6Omc3-OcxJQVeGnRkp2VbkMV41Iqn5Xug==
Age: 1879
www.memuplay.com/home/Public/img/app-background.jpg
200 OK 1.1 MB URL HTTP/1.1 www.memuplay.com/home/Public/img/app-background.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:09:25 14:53:24], baseline, precision 8, 3840x2880, components 3\012- data
Size 1.1 MB (1057195 bytes)
Hash 6a02e2a2ad412fc7c976ed5554cc9b6b
be91d14aedeb7ed64ff3ff6e8d3ec34aa99af59a
16785487d433cdd80371a22b59c006edc72ee98e6338fddbdd3478d78192dc42
GET /home/Public/img/app-background.jpg HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1057195
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Mon, 23 Mar 2020 22:36:23 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 21:47:53 GMT
Expires: Fri, 21 Apr 2023 21:47:53 GMT
Cache-Control: max-age=2592000
ETag: "5e7939e7-1021ab"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FPxh5l96gIvVtE-e0za5Q-qH_u3CRp0QOg1bz3rkf2KCoCVta4BRpw==
Age: 26089
www.memuplay.com/home/Public/img/icons3.png
200 OK 44 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/icons3.png
IP
File type PNG image data, 600 x 800, 8-bit/color RGBA, interlaced\012- data
Hash 1ced9f353ca3bfee605f78a8e643675a
62a6deaf438b5524d1db32e4f851aa0b67bf9520
d6a992c7c242b1276bc64dfe973b642c3a54de60e8412639d54aa4ab3cd04191
GET /home/Public/img/icons3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 43748
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 10 Jun 2021 05:58:47 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 23:37:36 GMT
Expires: Fri, 21 Apr 2023 23:37:36 GMT
Cache-Control: max-age=2592000
ETag: "60c1aa17-aae4"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OOKpmP_zk37RY41qbGZ1ElVat1avGgOKiFmMGmq8gVYMqT1iHnn-7g==
Age: 19506
www.memuplay.com/home/Public/img/icons.png
200 OK 13 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/icons.png
IP
File type PNG image data, 400 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 944572ee71a21c841372b3c5b03cb4bf
67bad54e37e85f75d0f2991bfdfbde11f322030e
c71f4a5f63dd40dcc21e8fcf88eb71f0603031b80c4619b1909bf30cb135c540
GET /home/Public/img/icons.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 13047
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 13 Feb 2020 09:58:57 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 22:48:06 GMT
Expires: Fri, 21 Apr 2023 22:48:06 GMT
Cache-Control: max-age=2592000
ETag: "5e451de1-32f7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vRV_5-PzOKclBmCsvO3GRQWq1irw9vpWkvBqjTqX3uZqbjYyMoAhFQ==
Age: 22476
www.memuplay.com/home/Public/img/xiazai-d.png
200 OK 3.5 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/xiazai-d.png
IP
File type PNG image data, 276 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d01aa5d1f0b4ad37e3746995501cccf
2f0428136642fb85eac6e039231bf573fd7af775
5a526105acda1cc5cb1ae0f10acfea913a9c8d28b606b3ea2109b5438e56e95d
GET /home/Public/img/xiazai-d.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3477
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Mon, 23 Mar 2020 21:54:27 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 12:53:26 GMT
Expires: Fri, 21 Apr 2023 12:53:24 GMT
Cache-Control: max-age=2592000
ETag: "5e793013-d95"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mzUqLaKZM0s2QdqQoH-1Eb-w_Sv5Rqu3P5IvbEYzAJcWWUpecDvsRA==
Age: 58158
www.memuplay.com/home/Public/img/twitter3.png
200 OK 2.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/twitter3.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash bab7b3c1345ae27dab399359d3d24599
261c9870939670c51153bcf31ba92f92b5d31cf1
a62e4e3a56af248e4cf7c7171d84b770a1574bf38d3903facbbbab13926870b5
GET /home/Public/img/twitter3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2937
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 20:13:42 GMT
Expires: Fri, 21 Apr 2023 20:13:42 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-b79"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: b3uPtRnhFs_4nXpFSyM1MRRF7bKBvUhdvH8FBFSf7i4MF1tdGRz33w==
Age: 31740
www.memuplay.com/home/Public/img/facebook3.png
200 OK 1.5 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/facebook3.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a40db18d16da81455b0f4c4dd038b21
7009f004b124ca4280283c24572ac4057ebb418b
5724ecc22cf4c88a6c7fa686942deb302226238a710aedf898d6217cede97cff
GET /home/Public/img/facebook3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1503
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 27 Nov 2020 02:53:37 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 22:17:42 GMT
Expires: Fri, 21 Apr 2023 22:17:41 GMT
Cache-Control: max-age=2592000
ETag: "5fc06a31-5df"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Xu-hIiSm-bw-6A1SaDVGGyIhASoAvm3qcJZ23JbTeBRgm3x2QvVxUg==
Age: 24301
www.memuplay.com/home/Public/img/whatsapp.png
200 OK 2.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/whatsapp.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 861760441c118bc7633be541ff4d7068
e25fb96b6b0fb3b91d24c24ddde452258371d6ea
7636296dc96ea074d76d6f270f3e0d65ba378d2c939b4a9c85f4fdb998ce6e19
GET /home/Public/img/whatsapp.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2206
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 28 Nov 2020 07:36:04 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 00:22:01 GMT
Expires: Sat, 22 Apr 2023 00:22:01 GMT
Cache-Control: max-age=2592000
ETag: "5fc1fde4-89e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mdkgQqhBKpzRqhefq18uugcj33wMJ7GCTaiH5ae_oSjgqqdX6q_2pQ==
Age: 16841
www.memuplay.com/home/Public/img/nadvantage1.png
200 OK 1.7 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage1.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash e83a245d5d53fa933d04b833346ee5f4
f7eef6d7a081871c1d0e272f466e902da4f0c25d
8e8a51e021ece885f3f18140aa50e0b8bddc920cb718d24f998db981d226e8a8
GET /home/Public/img/nadvantage1.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1674
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 00:08:35 GMT
Expires: Sat, 22 Apr 2023 00:08:35 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-68a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HXxwa2fDgVTRplP2XfuSUlDCubm_RbJ-h0ICMSmmyu8LidzKaZeyGA==
Age: 17647
www.memuplay.com/home/Public/img/nadvantage3.png
200 OK 2.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage3.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ad7a1d6790f87d9e06f0aeadb39467f
b7318fb13b9e5c2a0cabad7cfee99161674fcc3c
b68ac56fded7a94b63a7fb7869d5613a6983b22055ce7feafd6529a34e5c310d
GET /home/Public/img/nadvantage3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2906
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 19:02:50 GMT
Expires: Fri, 21 Apr 2023 19:02:50 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-b5a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O9oMqst-u3rr_dEwNff5EdIIkf50jQw23FK7SuLH7ltrw1jFBW9CzQ==
Age: 35991
www.memuplay.com/home/Public/img/vkontakte.png
200 OK 1.8 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/vkontakte.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c14c106e0d9a13502d94976e53d1054
507fe9e19d5b1ab6a7175310115523d496ad7654
5c3c8e38ec3417bd8f8bc4694f1d6a04944b41fe765475c72b88b6040152b366
GET /home/Public/img/vkontakte.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1823
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 20:54:06 GMT
Expires: Fri, 21 Apr 2023 20:54:06 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-71f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ECAcRc3dmiZyAkc8kiEvq0Lsah3D8MlOW1_2fUHQudRDWyYl0C-tVg==
Age: 29316
www.memuplay.com/home/Public/img/youtube.png
200 OK 1.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/youtube.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 201d0ba94255f906d6d7f1f221b58504
365f2e1922fb1de68ec6fd0cac02492c75070741
bcb19924877ee0223dca75af549d354d1db0798ba8f3a4ebe296a7859d6b86c0
GET /home/Public/img/youtube.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1231
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 27 Nov 2020 02:53:37 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 19:42:42 GMT
Expires: Fri, 21 Apr 2023 19:42:42 GMT
Cache-Control: max-age=2592000
ETag: "5fc06a31-4cf"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d8QnyI_KRFr9N1h7AtNSOqUvbPNbi57wum1wvuDNG-0RT77kjlMRww==
Age: 33600
www.memuplay.com/home/Public/img/nadvantage2.png
200 OK 1.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage2.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash 82c681e3388d342b1ed8d2f50a144d2d
735ebaa86ad79786e0203d967c493359ae43b176
962f4dac671cf363cc297a0a3244fb39e46b3149cbcaf208254b3be7c1204b47
GET /home/Public/img/nadvantage2.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1885
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 23:28:27 GMT
Expires: Fri, 21 Apr 2023 23:28:13 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-75d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qecp6635u64bsOUigY_uoRMsDFygaJtL-fL0c6zpsDT97K8_XlHbEA==
Age: 20069
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.memuplay.com/home/Public/img/reddit.png
200 OK 2.1 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/reddit.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 018c6f19eec8c0604e1764af22140890
55e5a6ce18dce3b1dff2b8e7fed776776636dd3f
b2c525fa721978883aaa2997f06074cce30a6917d518563d20e1560422620968
GET /home/Public/img/reddit.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2138
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 05:02:42 GMT
Expires: Sat, 22 Apr 2023 04:47:40 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-85a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hRCT36xnuIbf_mWPBVmemQM6Gt_HtVNFx-TKAZIE6hRwnYxlOFvXXA==
Age: 902
www.googletagmanager.com/gtag/js?id=UA-75186244-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-75186244-1
IP
File type ASCII text, with very long lines (2206)
Hash 1eb2bf2410448228001eec53b450e258
92ad8e76daa66bb6e65b0eb53b2e23a0648bf4f8
7c646a4860dc933db782f1a1de0482b234e89c362681b5299d2d2037d9baac8d
GET /gtag/js?id=UA-75186244-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 05:02:42 GMT
expires: Thu, 23 Mar 2023 05:02:42 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-44963QLX2Y
200 OK 79 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-44963QLX2Y
IP
File type ASCII text, with very long lines (21772)
Hash 192547cc5c3cb7985b0cce651e7d0323
05ed6b09c049d39119266384cd6d85e2e9fca47e
045823f0309b147f90144cebd6b63a70a96174c29a6cf7a86f03b75e11ea3f8d
GET /gtag/js?id=G-44963QLX2Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 05:02:42 GMT
expires: Thu, 23 Mar 2023 05:02:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78767
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.memuplay.com/home/Public/img/nusernote5.png
200 OK 2.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nusernote5.png
IP
File type PNG image data, 24 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ae73b92f38ee4df8591e3cf9113ce82
4f22f781669cc6e9e210fe88079a84e96fc77606
60c9ba57c71d89711c13b200284a0ed3f39b26eca62c73564a5b16babb0f0e96
GET /home/Public/img/nusernote5.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2191
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 27 Mar 2020 11:59:41 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 22:55:42 GMT
Expires: Fri, 21 Apr 2023 22:55:24 GMT
Cache-Control: max-age=2592000
ETag: "5e7deaad-88f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JhX_-b-jbqQ_GJTwJ5eEpZRCsJ1NYLFirXNV-BzJEnWtN8w3TruGdw==
Age: 22038
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 04:17:23 GMT
age: 2719
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
status.rapidssl.com/
200 OK 471 B IP
Hash 46c2704a97029ddd9d25cd323becaf4d
7b00c24b002d6e5363b1287375ef46094ac7579f
2595dbf93f5c637bb1e740d9bedd52d7eb3fc564066fe969cc12fe104563f032
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5647
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Etag: "641a9c4e-1d7"
Last-Modified: Thu, 23 Mar 2023 03:28:36 GMT
Server: ECAcc (amb/6B04)
X-Cache: HIT
Content-Length: 471
status.rapidssl.com/
200 OK 471 B IP
Hash 46c2704a97029ddd9d25cd323becaf4d
7b00c24b002d6e5363b1287375ef46094ac7579f
2595dbf93f5c637bb1e740d9bedd52d7eb3fc564066fe969cc12fe104563f032
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 257
Cache-Control: max-age=90845
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Etag: "641a9c4e-1d7"
Expires: Fri, 24 Mar 2023 06:16:47 GMT
Last-Modified: Wed, 22 Mar 2023 06:12:30 GMT
Server: ECAcc (amb/6AD1)
X-Cache: HIT
Content-Length: 471
dl.memuplay.com/new_market/img/com.innersloth.spacemafia.icon.2023-03-01-09-11-30.png
200 OK 67 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.innersloth.spacemafia.icon.2023-03-01-09-11-30.png
IP
File type JPEG image data, baseline, precision 8, 512x512, components 3\012- data
Hash 21de6f05ba8e2b32946668656cb918a6
6e51610717c778d3f829af907527e5033f35c742
015d1cecf14c3ef529e92d788304fe58aa571c4e3ebaf4d78d5eea44f693c844
GET /new_market/img/com.innersloth.spacemafia.icon.2023-03-01-09-11-30.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 67423
server: nginx/1.18.0 (Ubuntu)
date: Fri, 17 Mar 2023 02:54:12 GMT
last-modified: Wed, 01 Mar 2023 01:11:30 GMT
etag: "63fea642-1075f"
expires: Sun, 16 Apr 2023 02:54:12 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d1Q9hDJzij08MBOGsxOR4A1wfJUvduUWamh8NFLgOUcAVk9O8GULzg==
age: 526109
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png
200 OK 41 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 512x512, components 3\012- data
Hash b3375007ffc3f1a8a68b214f1bc7e71c
9905617dc601759b9bec0a137841de245c1285c8
d752283c45ed1cffded22492bf140987e06cea262dfbdb05dabbb22482527626
GET /new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 40619
server: nginx/1.18.0 (Ubuntu)
date: Fri, 03 Mar 2023 22:23:07 GMT
last-modified: Tue, 29 Nov 2022 13:55:20 GMT
etag: "63860f48-9eab"
expires: Sun, 02 Apr 2023 22:23:07 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kTbgYoEEVwl6hvhX0L4o8HeXBwT5IBMp2xPCzWSL6Oxec1gLAFQXPA==
age: 1665575
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.studio27.MelonPlayground.icon.2023-03-14-21-34-55.png
200 OK 231 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.studio27.MelonPlayground.icon.2023-03-14-21-34-55.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 231 kB (231406 bytes)
Hash fa446fdd3d5c54fd9d39e14001f73584
2d8535f04fb634f8d24a1c99eb1d0cbefa8dc044
0a7a1de3056e3e3947708a64b35760b1070f6076599c9923a1877e80a85c2242
GET /new_market/img/com.studio27.MelonPlayground.icon.2023-03-14-21-34-55.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 231406
server: nginx/1.18.0 (Ubuntu)
date: Tue, 14 Mar 2023 13:44:30 GMT
last-modified: Tue, 14 Mar 2023 13:34:55 GMT
etag: "641077ff-387ee"
expires: Thu, 13 Apr 2023 13:44:30 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l7I5jUDZtimxOJLUnryRU1cCY7Iz_FGH3iIJUlxWgv4EiFefXpStoQ==
age: 746292
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 050ca4dc2182e0a27573b0d9f32b7834
bec14dc5af0d0b32210470673511acd8db404308
b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6772
Expires: Thu, 23 Mar 2023 06:55:34 GMT
Date: Thu, 23 Mar 2023 05:02:42 GMT
Connection: keep-alive
dl.memuplay.com/new_market/img/com.tencent.ig.icon.2023-03-17-09-19-52.png
200 OK 417 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.tencent.ig.icon.2023-03-17-09-19-52.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 417 kB (416955 bytes)
Hash ebe4c3a3d00e00e9b26d18fcde77a3b6
e60bde6ff2b7754f7cfddeacd07764a8f48d2257
79e358cc6eeb80ca09ffe177810233ca8a9b7a775d79bdbe2f669c202a99dfde
GET /new_market/img/com.tencent.ig.icon.2023-03-17-09-19-52.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 416955
server: nginx/1.18.0 (Ubuntu)
date: Fri, 17 Mar 2023 01:22:41 GMT
last-modified: Fri, 17 Mar 2023 01:19:53 GMT
etag: "6413c039-65cbb"
expires: Sun, 16 Apr 2023 01:22:41 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AS5AnS5Ha43P65HAcCJs1DYjAcHmkudiMeh_BrUqWPxLdhQHBU4RcQ==
age: 531601
X-Firefox-Spdy: h2
status.rapidssl.com/
200 OK 471 B IP
Hash 46c2704a97029ddd9d25cd323becaf4d
7b00c24b002d6e5363b1287375ef46094ac7579f
2595dbf93f5c637bb1e740d9bedd52d7eb3fc564066fe969cc12fe104563f032
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5647
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Etag: "641a9c4e-1d7"
Last-Modified: Thu, 23 Mar 2023 03:28:36 GMT
Server: ECAcc (amb/6B04)
X-Cache: HIT
Content-Length: 471
status.rapidssl.com/
200 OK 471 B IP
Hash 46c2704a97029ddd9d25cd323becaf4d
7b00c24b002d6e5363b1287375ef46094ac7579f
2595dbf93f5c637bb1e740d9bedd52d7eb3fc564066fe969cc12fe104563f032
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2688
Cache-Control: max-age=93276
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Etag: "641a9c4e-1d7"
Expires: Fri, 24 Mar 2023 06:57:18 GMT
Last-Modified: Wed, 22 Mar 2023 06:12:30 GMT
Server: ECAcc (amb/6B53)
X-Cache: HIT
Content-Length: 471
dl.memuplay.com/new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png
200 OK 423 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 423 kB (422731 bytes)
Hash 6a79c6b810420a84428ce8099b911b90
d29a0a4fd8a6365639fda1d88bc7729ccb0aec8b
532bf0f874e16735bb1c8bf9cc063d8b51882568f47068fe9c74247cc24eda5f
GET /new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 422731
server: nginx/1.18.0 (Ubuntu)
date: Tue, 07 Mar 2023 06:48:22 GMT
last-modified: Sat, 10 Dec 2022 01:28:15 GMT
etag: "6393e0af-6734b"
expires: Thu, 06 Apr 2023 06:48:22 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VsDLa3ziaxl6W17jwlhBzusn4OmNpN2rodX4k8FjsL4MpCl9oNHTgA==
age: 1376060
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16.jpg
200 OK 27 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 587x320, components 3\012- data
Hash 6428034d4dede9f74d6c3eebb4fb36c6
5e199e5bc7ec7c86bc78ddbc2563625c3267afac
bc0fee4de051dc52e09f0d95f74ac194fb41d6ea69786c8f9ec3a16e0433ed50
GET /new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26766
server: nginx/1.18.0 (Ubuntu)
date: Tue, 21 Mar 2023 18:21:58 GMT
last-modified: Wed, 07 Dec 2022 10:54:51 GMT
etag: "639070fb-688e"
expires: Thu, 20 Apr 2023 18:21:58 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QRGk2EW0wYpNE5rO1VNFS9Y2F-PYPQCwnT7mdktJdmnlmUo8erneyQ==
age: 124844
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png
200 OK 412 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 412 kB (412232 bytes)
Hash 939fb848a3bf2380ce0d3923185d2cae
7cdfe96a237715476b0a385859d6d668c40bd683
fff4dc0d14bf18e0877e08e3dabe208f2a1d4d002cc6dd862957a7dcf86224a3
GET /new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 412232
server: nginx/1.18.0 (Ubuntu)
date: Mon, 13 Mar 2023 20:19:42 GMT
last-modified: Fri, 13 Jan 2023 13:02:56 GMT
etag: "63c15680-64a48"
expires: Wed, 12 Apr 2023 20:19:42 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZHu-hZr_IK_vg9MAlzAb5YVcfWX0majOqCcqR_6Wq8QLTun_sjcA6Q==
age: 808980
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.xgame.bingfeng.hw.jsmw.icon.2023-01-12-21-30-11.png
200 OK 269 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.xgame.bingfeng.hw.jsmw.icon.2023-01-12-21-30-11.png
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x512, components 3\012- data
Size 269 kB (268560 bytes)
Hash 3b7200a5ac4bb63cfef5fca580593ae1
2a142fbd0057755a6eaac768876678e7d4095c37
a209c25afb72cc3f9bbfab1422c3d2050260bd0c6a2aa5fd7a5c8d56a0622d8c
GET /new_market/img/com.xgame.bingfeng.hw.jsmw.icon.2023-01-12-21-30-11.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 268560
server: nginx/1.18.0 (Ubuntu)
date: Fri, 03 Mar 2023 07:51:13 GMT
last-modified: Thu, 12 Jan 2023 13:30:11 GMT
etag: "63c00b63-41910"
expires: Sun, 02 Apr 2023 07:51:13 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yqQzMU22DOeFSmZYTOveX3wmK8otWRXEJFWPizTbZ_tLIYgiJLUsEg==
age: 1717888
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.uncosoft.towingsquad.icon.2023-01-29-16-56-22.png
200 OK 275 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.uncosoft.towingsquad.icon.2023-01-29-16-56-22.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 275 kB (274765 bytes)
Hash 15a1323ec5ff116c96e6c5782c04d285
3f8c08070c59a6a74de82665d7d7df78085055cf
7b8337c12d75205906988c5b0e2e811e7a26789f26a311b2cd54d379b86bd3bd
GET /new_market/img/com.uncosoft.towingsquad.icon.2023-01-29-16-56-22.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 274765
server: nginx/1.18.0 (Ubuntu)
date: Thu, 02 Mar 2023 22:13:31 GMT
last-modified: Sun, 29 Jan 2023 08:56:23 GMT
etag: "63d634b7-4314d"
expires: Sat, 01 Apr 2023 22:13:31 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jRAhwSlGdU-0Vudzg3zdZpHykFrKCvuFXjnzKFKWhv2oNoX7DExB5Q==
age: 1752551
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.xd.doors.secret.icon.2023-01-29-17-06-11.png
200 OK 268 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.xd.doors.secret.icon.2023-01-29-17-06-11.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 268 kB (268103 bytes)
Hash 0b474bad7dbbe0e6376eec2b7a2cdd92
7346a05adbaa458180d0f085ccdf9aa7e67cd355
fd6f5d374bdabf7f7a370d09b81432926e999b154b266349324d63aeea219e33
GET /new_market/img/com.xd.doors.secret.icon.2023-01-29-17-06-11.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 268103
server: nginx/1.18.0 (Ubuntu)
date: Tue, 21 Feb 2023 05:03:22 GMT
last-modified: Sun, 29 Jan 2023 09:06:12 GMT
etag: "63d63704-41747"
expires: Thu, 23 Mar 2023 05:03:22 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UXQIqYX6YrkdAFbmnBWFOjfjKOZsF3EQ2SQumoWJ91OuAVLWXoE5qw==
age: 2591960
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.supercell.clashofclans.icon.2023-02-22-21-02-51.png
200 OK 342 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.supercell.clashofclans.icon.2023-02-22-21-02-51.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 342 kB (341738 bytes)
Hash a6446faec16e449b0aad65e069ba9dec
75ad5884b37af38a57a6e1e485e2c31bd0982f5c
bd6c49b67a9c9bc9894259cd0504479c0ea38fb43fc0420e5ad0e30ca6b617bc
GET /new_market/img/com.supercell.clashofclans.icon.2023-02-22-21-02-51.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 341738
server: nginx/1.18.0 (Ubuntu)
date: Fri, 03 Mar 2023 15:00:01 GMT
last-modified: Wed, 22 Feb 2023 13:02:51 GMT
etag: "63f6127b-536ea"
expires: Sun, 02 Apr 2023 15:00:01 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fIPSg9k30iWBGOQ0HFOIE4MDXukJLioIcIwunNL_ztMdV5Qkg9YC_w==
age: 1692161
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.matrix.stick.giantwar.icon.2023-01-29-16-56-13.png
200 OK 234 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.matrix.stick.giantwar.icon.2023-01-29-16-56-13.png
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x512, components 3\012- data
Size 234 kB (233582 bytes)
Hash d3da6b5a9a8d4d505f7889e3677f70a4
7167f4d45d8372c32b8d76a829eda36d7ecaa738
7124badfadfa4954200495c602d55786f2a888b68a1a514ee891df6265cc6821
GET /new_market/img/com.matrix.stick.giantwar.icon.2023-01-29-16-56-13.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 233582
server: nginx/1.18.0 (Ubuntu)
date: Fri, 17 Mar 2023 12:24:22 GMT
last-modified: Sun, 29 Jan 2023 08:56:13 GMT
etag: "63d634ad-3906e"
expires: Sun, 16 Apr 2023 12:24:22 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BEotmmoTnjbCnICQUf1vwBSxT5kz1H9YF4JyYckr2sQLRW5XJ2clKA==
age: 491900
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/and.onemt.pp.en.icon.2023-01-18-09-17-30.png
200 OK 180 kB URL HTTP/2 dl.memuplay.com/new_market/img/and.onemt.pp.en.icon.2023-01-18-09-17-30.png
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x512, components 3\012- data
Size 180 kB (179931 bytes)
Hash 22e7b5c906e0105d4710cbdf125a678e
de6e38f783fc9f45ec5889868ef7cc1c1d4fe4de
188ab2acf4df4dd08fb0f07b4a810809afc480ddc075880bbf07d20d0a0b5045
GET /new_market/img/and.onemt.pp.en.icon.2023-01-18-09-17-30.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 179931
server: nginx/1.18.0 (Ubuntu)
date: Mon, 13 Mar 2023 19:33:18 GMT
last-modified: Wed, 18 Jan 2023 01:17:31 GMT
etag: "63c748ab-2bedb"
expires: Wed, 12 Apr 2023 19:33:18 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fsyYLrtj9eqV0xyAdxeQGJHSxEHw9uLHDn4s9xl6c1dnky9Bl0y4kA==
age: 811764
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.AkhirPekan.Mystery.icon.2023-01-29-17-37-24.png
200 OK 229 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.AkhirPekan.Mystery.icon.2023-01-29-17-37-24.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 229 kB (228941 bytes)
Hash 995f0ebd0e3c817149966f845ba6e532
9286252576b56ea1f4b1e9ed4f05865dae0e44bb
2c64ae147d88fb3cffcce039130410c414f83367763547bd3240100124a1226f
GET /new_market/img/com.AkhirPekan.Mystery.icon.2023-01-29-17-37-24.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 228941
server: nginx/1.18.0 (Ubuntu)
date: Mon, 27 Feb 2023 16:53:05 GMT
last-modified: Sun, 29 Jan 2023 09:37:24 GMT
etag: "63d63e54-37e4d"
expires: Wed, 29 Mar 2023 16:53:05 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fUBvyv0PxVtAjpkcf9HKIjyv_7XJL81PpDNEvfAUwKGWdDX73N9Ghg==
age: 2030977
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.survivor.playtime.imposter.icon.2023-01-29-17-14-01.png
200 OK 199 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.survivor.playtime.imposter.icon.2023-01-29-17-14-01.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 199 kB (198953 bytes)
Hash 3c41f6d2f4471d1c44a5c328a88a5127
a9caea68f300e346924b96a8f097c7c408ca93d3
7be0e961baf07074affb084794ef3349a1c5d18427401f1629b4cd92e29ea3a2
GET /new_market/img/com.survivor.playtime.imposter.icon.2023-01-29-17-14-01.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 198953
server: nginx/1.18.0 (Ubuntu)
date: Sat, 25 Feb 2023 01:05:40 GMT
last-modified: Sun, 29 Jan 2023 09:14:01 GMT
etag: "63d638d9-30929"
expires: Mon, 27 Mar 2023 01:05:40 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oYeYW2yHFY-_fduKJfzZ98yPu_r7DXCx4AWrPPtTZoxPyae5tSQLcg==
age: 2260622
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.gravitygamehub.ragnarokarena.aos.icon.2022-12-11-09-21-38.png
200 OK 318 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.gravitygamehub.ragnarokarena.aos.icon.2022-12-11-09-21-38.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 318 kB (318258 bytes)
Hash e78f6db5db658c2b54e27a091c8b81d5
0556b79615cb48147dd2aafd2fa730eaaec42d5a
e1c143195dc370ca005472403b5a3f7a2267c79241279020a0d168ab8510483f
GET /new_market/img/com.gravitygamehub.ragnarokarena.aos.icon.2022-12-11-09-21-38.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 318258
server: nginx/1.18.0 (Ubuntu)
date: Sun, 26 Feb 2023 23:00:50 GMT
last-modified: Sun, 11 Dec 2022 01:21:38 GMT
etag: "639530a2-4db32"
expires: Tue, 28 Mar 2023 23:00:50 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0xYsyIVBu5OhU4EdYzw8DDYouF6mZa33fFPHsfAuEOa2sfdEIqIeFw==
age: 2095311
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.square_enix.JustCauseMobile_ww.icon.2023-01-29-16-43-38.png
200 OK 464 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.square_enix.JustCauseMobile_ww.icon.2023-01-29-16-43-38.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 464 kB (464137 bytes)
Hash 6c1596724faa092b12aa9aaafb4a5c4e
4d7c61ed91d13ba88a4dbac25a025e37c7361d36
a3ce1c92f4cd71c39648a4b41f450e33857224919bacdbf0dc074a71ce7d715e
GET /new_market/img/com.square_enix.JustCauseMobile_ww.icon.2023-01-29-16-43-38.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 464137
server: nginx/1.18.0 (Ubuntu)
date: Tue, 21 Feb 2023 13:29:19 GMT
last-modified: Sun, 29 Jan 2023 08:43:38 GMT
etag: "63d631ba-71509"
expires: Thu, 23 Mar 2023 13:29:19 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RCbOpqpYWXcM_IGAHU9qKogqdFwuv49kFdjF0wtzyKbBDP6NaTvK5w==
age: 2561603
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/jp.konami.pesam.icon.2023-02-23-21-15-36.png
200 OK 570 kB URL HTTP/2 dl.memuplay.com/new_market/img/jp.konami.pesam.icon.2023-02-23-21-15-36.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 570 kB (570502 bytes)
Hash 42f94bb477eae2a671512381a23582ba
a536f22ec7fa70a96aa04f863341cc2dd63153ab
86611925d4ba3761e9267f4a5059039314b3b5ef21b7349451cc86a3eecaf8fc
GET /new_market/img/jp.konami.pesam.icon.2023-02-23-21-15-36.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 570502
server: nginx/1.18.0 (Ubuntu)
date: Fri, 03 Mar 2023 14:55:06 GMT
last-modified: Thu, 23 Feb 2023 13:15:37 GMT
etag: "63f766f9-8b486"
expires: Sun, 02 Apr 2023 14:55:06 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hgGCcAitsPDsnyxAybs8I6MtNWm4Yb_ItCVjSS3iC2SRzylsYK3X1Q==
age: 1692456
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.zahos.talking.juan.icon.2023-01-15-09-41-01.png
200 OK 404 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.zahos.talking.juan.icon.2023-01-15-09-41-01.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 404 kB (404025 bytes)
Hash 59783aecbedb397f1200439792705546
64b87e7ac43f3b565d12dcb75e63f901669fd5b8
fe277672fd4f4788f4ea8cb0fb42f6add238c819e67abed271ac4a466e12faef
GET /new_market/img/com.zahos.talking.juan.icon.2023-01-15-09-41-01.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 404025
server: nginx/1.18.0 (Ubuntu)
date: Mon, 13 Mar 2023 03:10:13 GMT
last-modified: Sun, 15 Jan 2023 01:41:02 GMT
etag: "63c359ae-62a39"
expires: Wed, 12 Apr 2023 03:10:13 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H8tmk730gPK5BifKXxaKhR_aW9w7sqzt77HJQvQqqJLhTwhFw8cGEg==
age: 870749
X-Firefox-Spdy: h2
status.rapidssl.com/
200 OK 471 B IP
Hash 46c2704a97029ddd9d25cd323becaf4d
7b00c24b002d6e5363b1287375ef46094ac7579f
2595dbf93f5c637bb1e740d9bedd52d7eb3fc564066fe969cc12fe104563f032
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:42 GMT
Etag: "641a9c4e-1d7"
Server: ECAcc (amb/6B0A)
Content-Length: 471
dl.memuplay.com/new_market/img/com.dts.freefiremax.icon.2023-03-22-21-14-10.png
200 OK 350 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.dts.freefiremax.icon.2023-03-22-21-14-10.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 350 kB (349947 bytes)
Hash 648edcdae721d8719135100cb2787328
840224bb8564f25c954886324a70025b865eb1d5
f6f8b0f88608aefd7c0735101b161948a509b602a23e5167a7787d1cb76c8e72
GET /new_market/img/com.dts.freefiremax.icon.2023-03-22-21-14-10.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 349947
server: nginx/1.18.0 (Ubuntu)
date: Wed, 22 Mar 2023 13:14:25 GMT
last-modified: Wed, 22 Mar 2023 13:14:10 GMT
etag: "641aff22-556fb"
expires: Fri, 21 Apr 2023 13:14:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fZ8Vv1DH7rZQ9gSxmZz-tsSWAT8DsBVZTmWa3N-5MbX1GgIxKzH0ug==
age: 56898
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.dts.freefireth.icon.2023-03-22-21-02-50.png
200 OK 346 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.dts.freefireth.icon.2023-03-22-21-02-50.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 346 kB (345543 bytes)
Hash 483528c77a19be6735661c5f68a749ea
f2c233f8ab23e809f835b5b1ce1e72b794ed9aa5
1bdcb9eef8c9f09dd1ae9107086023f7acb1dba7b784b3fa2ba7fd283a494f53
GET /new_market/img/com.dts.freefireth.icon.2023-03-22-21-02-50.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 345543
server: nginx/1.18.0 (Ubuntu)
date: Wed, 22 Mar 2023 13:07:33 GMT
last-modified: Wed, 22 Mar 2023 13:02:50 GMT
etag: "641afc7a-545c7"
expires: Fri, 21 Apr 2023 13:07:33 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y6MMV4njrhwOcqd8cpqj2rS8OLoqJxJH8cyJZuaIwmijM44cPTDJ2g==
age: 57310
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.netmarble.solol.sc1.2022-12-07-18-49-16.jpg
200 OK 29 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.netmarble.solol.sc1.2022-12-07-18-49-16.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 569x320, components 3\012- data
Hash 71434ecad625131bd8ce63dd1a7d7b51
72a56c04af856a841f7cb58218b2c86ccee4c414
63b034761dcd31352a3b20b18980b6c710b49db48c03a2d18ad33398bbc27f05
GET /new_market/img/com.netmarble.solol.sc1.2022-12-07-18-49-16.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 28592
server: nginx/1.18.0 (Ubuntu)
date: Sat, 11 Mar 2023 14:45:43 GMT
last-modified: Wed, 07 Dec 2022 10:54:53 GMT
etag: "639070fd-6fb0"
expires: Mon, 10 Apr 2023 14:45:43 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 70dMunOMw3NJT1VdeboIhdpnJE072XeCuEd-2DULwhK0eC_zgFt27A==
age: 1001820
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.netmarble.solol.icon.2022-12-07-18-49-16.png
200 OK 28 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.netmarble.solol.icon.2022-12-07-18-49-16.png
IP
File type PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash fb22315adacb0de588e9a24d3472a4f3
144b4f8c079fd783ec310868f50363ed64bdada0
5c11df6f4225205dab8f5526e9f39846c4f434213a0bb371395f0c6b389f4fda
GET /new_market/img/com.netmarble.solol.icon.2022-12-07-18-49-16.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 27775
server: nginx/1.18.0 (Ubuntu)
date: Mon, 06 Mar 2023 07:51:53 GMT
last-modified: Wed, 07 Dec 2022 10:54:51 GMT
etag: "639070fb-6c7f"
expires: Wed, 05 Apr 2023 07:51:53 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b1aBstXTbuVLhh-_Pb9kvFEfE2A_1_FVVCSJoXFl7_0AK-wnKfHqYg==
age: 1458650
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16_2x.jpg
200 OK 156 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16_2x.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1980x1080, components 3\012- data
Size 156 kB (156244 bytes)
Hash 1fe34fdca1a8237213e4e9f7a0a00784
3556eacd8ffd29eaafbeb10a251b78e269e53552
edd03b2cd2ad6fc40747f3e234dc312c59e913c795a3d0b95b5e40caa51c43d7
GET /new_market/img/com.netmarble.solol.sc0.2022-12-07-18-49-16_2x.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 156244
server: nginx/1.18.0 (Ubuntu)
date: Sat, 11 Mar 2023 14:48:59 GMT
last-modified: Wed, 07 Dec 2022 10:54:52 GMT
etag: "639070fc-26254"
expires: Mon, 10 Apr 2023 14:48:59 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GzH4ShP69b8UC_J-EXgnslJRAQO8QXGGgZFlifnZwKR1YVvYizQPhw==
age: 1001624
X-Firefox-Spdy: h2
www.memuplay.com/home/Public/img/shortlogo.png
200 OK 3.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/shortlogo.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash f9a107accaa1b5d8a1bc53caf48def6a
c539b2cef7544b08956ab0f09beb633ab84fbc82
99e9385f6bfe61f68776a3603e306964b3045ce1bd47d444c96895c9bfa5dd73
GET /home/Public/img/shortlogo.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-com.netmarble.solol-on-pc.html
Cookie: _ga_44963QLX2Y=GS1.1.1679547769.1.0.1679547769.60.0.0; _ga=GA1.1.2065207251.1679547770
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3872
Connection: keep-alive
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 02 Nov 2019 06:59:33 GMT
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 21:56:05 GMT
Expires: Fri, 21 Apr 2023 21:56:05 GMT
Cache-Control: max-age=2592000
ETag: "5dbd2955-f20"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5IWT3JlHf57WbptSxq_L3--g3QwDs6DxXxksvru3cWLBw-iFY3Dz4g==
Age: 25598
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f0607231b4674d2bfb5a6798b0b4093
6c14f5c952e413365703144951b09b7126ff8e2d
869816689cb9507d294d69f953e8ea33452a177d405816ad86f729b123ceaa98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 04:05:11 GMT
expires: Thu, 23 Mar 2023 06:05:11 GMT
cache-control: public, max-age=7200
age: 3452
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d09ed5b5ccfa429cf3ded7d6634ce586
e1d26f666c2b0ecf75aa847b3ee907c41514b588
b5536c7e81811b1a5ffeb8dcc80a08f14b4c5ed5ddb2c53b4b52f84c721beeed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1&z=1053126243
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1&z=1053126243
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1&z=1053126243 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 05:02:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (3599)
Hash a18c515237089f26b6030bbb6c86d5e1
01cecd7c01908cf85e3b711a8e71762ab8e11e41
0418be3f15dc3404fe8329e4fa96eeba64b1de48f677e0baef3fec9bdfb67c3c
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 23 Mar 2023 05:02:43 GMT
expires: Thu, 23 Mar 2023 05:02:43 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 412054945117218721
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48707
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/c64a5d56/www-widgetapi.vflset/www-widgetapi.js
200 OK 63 kB URL HTTP/2 www.youtube.com/s/player/c64a5d56/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (591)
Hash 0a2e2f95b54e89a310694f31dbc6fc62
9daa610e872ca9f6e2ff762c593cdc746ec3622f
8d4c2868376631c94ac7b06f4a26a3777ca799ec746caaa221b0074dca533d58
GET /s/player/c64a5d56/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 63085
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 08:48:45 GMT
expires: Thu, 21 Mar 2024 08:48:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 00:19:08 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 72838
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ENZh+ttDGu9zyPMXmtMLJA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iMhhvmR3p9e5EIfP/SqzaTiCeY0=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d09ed5b5ccfa429cf3ded7d6634ce586
e1d26f666c2b0ecf75aa847b3ee907c41514b588
b5536c7e81811b1a5ffeb8dcc80a08f14b4c5ed5ddb2c53b4b52f84c721beeed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f0607231b4674d2bfb5a6798b0b4093
6c14f5c952e413365703144951b09b7126ff8e2d
869816689cb9507d294d69f953e8ea33452a177d405816ad86f729b123ceaa98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-44963QLX2Y>m=45je33k0&_p=258637145&_gaz=1&cid=2065207251.1679547770&ul=en-us&sr=1280x1024&_s=1&sid=1679547769&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-com.netmarble.solol-on-pc.html&dt=Download%20Solo%20Leveling%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-44963QLX2Y>m=45je33k0&_p=258637145&_gaz=1&cid=2065207251.1679547770&ul=en-us&sr=1280x1024&_s=1&sid=1679547769&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-com.netmarble.solol-on-pc.html&dt=Download%20Solo%20Leveling%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-44963QLX2Y>m=45je33k0&_p=258637145&_gaz=1&cid=2065207251.1679547770&ul=en-us&sr=1280x1024&_s=1&sid=1679547769&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-com.netmarble.solol-on-pc.html&dt=Download%20Solo%20Leveling%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.memuplay.com
date: Thu, 23 Mar 2023 05:02:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=2065207251.1679547770&jid=333064491&gjid=1122908535&_gid=1446926319.1679547770&_u=YADAAUAAAAAAACAAI~&z=555298459
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=2065207251.1679547770&jid=333064491&gjid=1122908535&_gid=1446926319.1679547770&_u=YADAAUAAAAAAACAAI~&z=555298459
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=2065207251.1679547770&jid=333064491&gjid=1122908535&_gid=1446926319.1679547770&_u=YADAAUAAAAAAACAAI~&z=555298459 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.memuplay.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 23 Mar 2023 05:02:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-44963QLX2Y&cid=2065207251.1679547770>m=45je33k0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.memuplay.com
date: Thu, 23 Mar 2023 05:02:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230321/r20190131/zrt_lookup.html
200 OK 4.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230321/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3205)
Hash bad17ab9662318e8927e5009c83c2ad1
53ded630f95abe04b7b77d43076bf71b9ea71c02
68da39270ebfa6d17f4b765cbe004797a736611585ff0c53213d91f78f13c260
GET /pagead/html/r20230321/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4549
x-xss-protection: 0
date: Thu, 23 Mar 2023 02:00:19 GMT
expires: Thu, 06 Apr 2023 02:00:19 GMT
cache-control: public, max-age=1209600
etag: 2378337311435320485
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
age: 10944
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 23 Mar 2023 05:02:43 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 23 Mar 2023 05:02:43 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 15a79d87680ced9baa769b58a70a08c9
5a6bd5d054b135b021d03f3148a249aa274d5930
9e075624b17dbee04f9cd5544c2f0f053f4fadfc49ab3572edd5f350c35a7816
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693
200 OK 254 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693
IP
File type ASCII text, with very long lines (391), with no line terminators
Hash 0b90aff4f9f794303660ed2d52bb0b0d
e74d8a7085f4a2119132773fea7229969bf81231
47be46193393be35007d2416eb46dae9a04ed167f712ddf371be732c30b935d5
GET /gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 23 Mar 2023 05:02:43 GMT
server: cafe
cache-control: private
content-length: 254
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 15a79d87680ced9baa769b58a70a08c9
5a6bd5d054b135b021d03f3148a249aa274d5930
9e075624b17dbee04f9cd5544c2f0f053f4fadfc49ab3572edd5f350c35a7816
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1e0119e488c4b31ca1eb177628ed9414
2f243d2c11d4a6a1aac850b5325a85aa94c28bf2
9fdcc7cf7fc0b1afec05df8fd806d17d9a5f656166369dcb737a128ddd4e2bb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230321/r20110914/client/qs_click_protection_fy2021.js
200 OK 8.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230321/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (2465)
Hash 9da78d3accd905d5cc426fad37ef9ce9
c1c5ebc107844e165679f2b069763d10cf8d226d
79578369b938e27d7a0e3b6d02e048ef340d848e12e7b2465acb1e52dc24eeaa
GET /pagead/js/r20230321/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8627
x-xss-protection: 0
date: Thu, 23 Mar 2023 01:59:57 GMT
expires: Thu, 06 Apr 2023 01:59:57 GMT
cache-control: public, max-age=1209600
etag: 8620137988422272387
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 10966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash a0891b2bea3bbbe4dd8ad760e315b9c0
2db43ae485ec7a9d37a18f3b8435040538e161c4
0e57ee2309d420b47095a5dd9999e9421c1a6c2ed2f6f8aa444049a74dd6712d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6166
Cache-Control: max-age=102159
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641ab16d-13a"
Expires: Fri, 24 Mar 2023 09:25:23 GMT
Last-Modified: Wed, 22 Mar 2023 07:42:37 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 314
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1945515
expires: Tue, 12 Mar 2024 05:02:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ic2rwnerckc3esBzMeUjkYFiJNBgb42T8M6rmLVE8jAQVarpi1BX3qAomovl9AIAzGDNRlj6hi92Bygv3pkJ49C5dCbzNfFRMdKLTZ5l8Pp1659ooXiMLfOlSTToIsdfvGThkDAT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ac41fb5c86ab4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9095e56c7010bfcbe5b75b9178fb743e
29a3c046eb4aa112b5fb0a4b3be76f1239d66ad5
b65f391c272bc8d9d84f50f0a90f67e33a221f7edc458e10cc746914c5c5366a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6374
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Last-Modified: Thu, 23 Mar 2023 03:16:31 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kriJFrOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBz3RtkM8TG6XU98xZTIAAAEgAACg5BUVVCQVFZQkFRRVBBUQ&wp=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA
200 OK 0 B URL HTTP/2 rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kriJFrOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBz3RtkM8TG6XU98xZTIAAAEgAACg5BUVVCQVFZQkFRRVBBUQ&wp=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kriJFrOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBz3RtkM8TG6XU98xZTIAAAEgAACg5BUVVCQVFZQkFRRVBBUQ&wp=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA HTTP/1.1
Host: rtb.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 179157
date: Thu, 23 Mar 2023 05:02:43 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3255
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 05:02:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 312 B IP
Hash 67a39d390f45cb8cfff8cb90dfb27bc7
053a664e6897e229f43272444520bbfaf8d9e166
dc49cfbb82b833f0929f817ba0a0f03b8c4ddbe32baf472023d5a8d1994a0ed7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: max-age=133827
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641b3a0d-138"
Expires: Fri, 24 Mar 2023 18:13:11 GMT
Last-Modified: Wed, 22 Mar 2023 17:25:33 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 67a39d390f45cb8cfff8cb90dfb27bc7
053a664e6897e229f43272444520bbfaf8d9e166
dc49cfbb82b833f0929f817ba0a0f03b8c4ddbe32baf472023d5a8d1994a0ed7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: max-age=133827
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641b3a0d-138"
Expires: Fri, 24 Mar 2023 18:13:11 GMT
Last-Modified: Wed, 22 Mar 2023 17:25:33 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 312
ads.eu.criteo.com/delivery/r/afr.php?z=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA&u=%7CegwyXJrZDqxHR%2BZWdmf%2FPeLNsQcrYbJF%2Bod0wScVt%2Fk%3D%7C&c1=d4_i42wbpE2NRhSHxThdXdeadzG9gosNB-Ap14Pg0HmFAf1GHAR2jhV7Kd6SKvkZ2c775jfyZY6IhKYyRysqoEUQqAVxP9Bl8lSE9N5sJDRBYmG29NW2R2kREK7WUXxdPaQQMppY-Vhixla6reAS1SxZqdQSsSN4E6HqwsAK9dHZ5xishdEibYZTcVDPtTk--MQphA7b3iedi-2axHzJc1s2RE496nAOK5s-SlGhM9TRouhgTlOUvcskRgmmuI1mk0eTGafBt37Lkx6YiGsHqNBbESN6Wfpb6b1Zm84reEjH_1CQzKXzUezsZbY-znyAYVGYwZb4qjMu7QUtNMCN5kW1RqplS31yIMtc7wkyI34QJKnI0HRwNvgWRwO4Lfp0G1Y95_HQmG2gLW8gSAYyDF2lo5ib7knYEo5pFtomfqNKO7oqC9ptUpeOkRBaeXVeeaOG9SRlvFShl8BddK7_E4ishPj1W3Vh1WQQwI1qdm83NAni23O5-UyTt0hfdV-6BjmfDcC7dBafPvSYFiZ_eW7PfDRITiiZKOlXc2JBPT-3JogAX5R9gqT_EQscX9_gwBT7rhAiTgDkT3IRm4Xwvw&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAzKfc90bZO_9K7WJiQaV47-4BMme0rFchf6X93DAjbcBEAEgAGC7BoIBF2NhLXB1Yi00MjAxMzM0MzA2OTY0NjkzyAEJqQITFBo5ND2yPqgDAaoE2gFP0KlwFhCo03MwneP6ifRE8l-od0ooyixi3Qc3PBLLL-ZEabs-ghQIje_Tt5h4_SzNyo-N2J8LxNiLHshLaUWbTpBn7_pcS89qN4kX6z9VnpMNV485rEQeI2RLFINvRLt-Tzrs-GPIpnBW-FTl2K5JWrUUorOEnM12tzngT73Jphe300tFKTH34cbW9PTFVL_6MhwuqA6bsIwRPZfPljeUrhRUR7G6UKiaRyDwDLJ5UCpuPfcHa_-dYxn6Ubtg93_kIx3RFM8F5NaLMOQahl6g2XSnJ0Vsd7-sJIAGo4nZrNr2yIZQoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_0U72ggzf-n3nQTQSPjF-uSyX7uXw%26client%3Dca-pub-4201334306964693%26adurl%3D
200 OK 60 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA&u=%7CegwyXJrZDqxHR%2BZWdmf%2FPeLNsQcrYbJF%2Bod0wScVt%2Fk%3D%7C&c1=d4_i42wbpE2NRhSHxThdXdeadzG9gosNB-Ap14Pg0HmFAf1GHAR2jhV7Kd6SKvkZ2c775jfyZY6IhKYyRysqoEUQqAVxP9Bl8lSE9N5sJDRBYmG29NW2R2kREK7WUXxdPaQQMppY-Vhixla6reAS1SxZqdQSsSN4E6HqwsAK9dHZ5xishdEibYZTcVDPtTk--MQphA7b3iedi-2axHzJc1s2RE496nAOK5s-SlGhM9TRouhgTlOUvcskRgmmuI1mk0eTGafBt37Lkx6YiGsHqNBbESN6Wfpb6b1Zm84reEjH_1CQzKXzUezsZbY-znyAYVGYwZb4qjMu7QUtNMCN5kW1RqplS31yIMtc7wkyI34QJKnI0HRwNvgWRwO4Lfp0G1Y95_HQmG2gLW8gSAYyDF2lo5ib7knYEo5pFtomfqNKO7oqC9ptUpeOkRBaeXVeeaOG9SRlvFShl8BddK7_E4ishPj1W3Vh1WQQwI1qdm83NAni23O5-UyTt0hfdV-6BjmfDcC7dBafPvSYFiZ_eW7PfDRITiiZKOlXc2JBPT-3JogAX5R9gqT_EQscX9_gwBT7rhAiTgDkT3IRm4Xwvw&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAzKfc90bZO_9K7WJiQaV47-4BMme0rFchf6X93DAjbcBEAEgAGC7BoIBF2NhLXB1Yi00MjAxMzM0MzA2OTY0NjkzyAEJqQITFBo5ND2yPqgDAaoE2gFP0KlwFhCo03MwneP6ifRE8l-od0ooyixi3Qc3PBLLL-ZEabs-ghQIje_Tt5h4_SzNyo-N2J8LxNiLHshLaUWbTpBn7_pcS89qN4kX6z9VnpMNV485rEQeI2RLFINvRLt-Tzrs-GPIpnBW-FTl2K5JWrUUorOEnM12tzngT73Jphe300tFKTH34cbW9PTFVL_6MhwuqA6bsIwRPZfPljeUrhRUR7G6UKiaRyDwDLJ5UCpuPfcHa_-dYxn6Ubtg93_kIx3RFM8F5NaLMOQahl6g2XSnJ0Vsd7-sJIAGo4nZrNr2yIZQoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_0U72ggzf-n3nQTQSPjF-uSyX7uXw%26client%3Dca-pub-4201334306964693%26adurl%3D
IP
Hash 040c55d8d47bb73f64ade52267bb98be
da42726b2baeed18ce8b492ea2a4f6b10b569501
46d43912bc187b55df511437cd926d7868104e2748cd0b552eb61485197dc1e3
GET /delivery/r/afr.php?z=ZBvdcwAK_u8KwkS1AA_xldOXwgiJQzNFD1gMVA&u=%7CegwyXJrZDqxHR%2BZWdmf%2FPeLNsQcrYbJF%2Bod0wScVt%2Fk%3D%7C&c1=d4_i42wbpE2NRhSHxThdXdeadzG9gosNB-Ap14Pg0HmFAf1GHAR2jhV7Kd6SKvkZ2c775jfyZY6IhKYyRysqoEUQqAVxP9Bl8lSE9N5sJDRBYmG29NW2R2kREK7WUXxdPaQQMppY-Vhixla6reAS1SxZqdQSsSN4E6HqwsAK9dHZ5xishdEibYZTcVDPtTk--MQphA7b3iedi-2axHzJc1s2RE496nAOK5s-SlGhM9TRouhgTlOUvcskRgmmuI1mk0eTGafBt37Lkx6YiGsHqNBbESN6Wfpb6b1Zm84reEjH_1CQzKXzUezsZbY-znyAYVGYwZb4qjMu7QUtNMCN5kW1RqplS31yIMtc7wkyI34QJKnI0HRwNvgWRwO4Lfp0G1Y95_HQmG2gLW8gSAYyDF2lo5ib7knYEo5pFtomfqNKO7oqC9ptUpeOkRBaeXVeeaOG9SRlvFShl8BddK7_E4ishPj1W3Vh1WQQwI1qdm83NAni23O5-UyTt0hfdV-6BjmfDcC7dBafPvSYFiZ_eW7PfDRITiiZKOlXc2JBPT-3JogAX5R9gqT_EQscX9_gwBT7rhAiTgDkT3IRm4Xwvw&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAzKfc90bZO_9K7WJiQaV47-4BMme0rFchf6X93DAjbcBEAEgAGC7BoIBF2NhLXB1Yi00MjAxMzM0MzA2OTY0NjkzyAEJqQITFBo5ND2yPqgDAaoE2gFP0KlwFhCo03MwneP6ifRE8l-od0ooyixi3Qc3PBLLL-ZEabs-ghQIje_Tt5h4_SzNyo-N2J8LxNiLHshLaUWbTpBn7_pcS89qN4kX6z9VnpMNV485rEQeI2RLFINvRLt-Tzrs-GPIpnBW-FTl2K5JWrUUorOEnM12tzngT73Jphe300tFKTH34cbW9PTFVL_6MhwuqA6bsIwRPZfPljeUrhRUR7G6UKiaRyDwDLJ5UCpuPfcHa_-dYxn6Ubtg93_kIx3RFM8F5NaLMOQahl6g2XSnJ0Vsd7-sJIAGo4nZrNr2yIZQoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_0U72ggzf-n3nQTQSPjF-uSyX7uXw%26client%3Dca-pub-4201334306964693%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 05:02:43 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=wFA5BgOtFiuW5PPQsRm2QxWwApXgJSIOvnx31wbH-zOI57g74BkN42lwqrKcGEdFAD9nAik43syszCjiJJiQqqLv3Hyc8EBAJce1UQBW5Fi9adKBDtEkpmGbEs9c1qpIMNnVqPrLNUhUfCJ-IKZsNnieDr9_oVM9ojU9_hTHtEiGGz7qyNrrMeqgE1HrwiKF0wqrlGPGb-M63NtxOFnpOWPr9kFAXYQe9cF8J2jHlF--bYASMBgtlQfEFW3qgQpseV-TTA"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 42970348
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 67a39d390f45cb8cfff8cb90dfb27bc7
053a664e6897e229f43272444520bbfaf8d9e166
dc49cfbb82b833f0929f817ba0a0f03b8c4ddbe32baf472023d5a8d1994a0ed7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: max-age=133827
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641b3a0d-138"
Expires: Fri, 24 Mar 2023 18:13:11 GMT
Last-Modified: Wed, 22 Mar 2023 17:25:33 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 67a39d390f45cb8cfff8cb90dfb27bc7
053a664e6897e229f43272444520bbfaf8d9e166
dc49cfbb82b833f0929f817ba0a0f03b8c4ddbe32baf472023d5a8d1994a0ed7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: max-age=133827
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641b3a0d-138"
Expires: Fri, 24 Mar 2023 18:13:11 GMT
Last-Modified: Wed, 22 Mar 2023 17:25:33 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 312
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31ad983ec21e3dee7b6083bc04742aee
a98933e2845c02158175a54d9648f12086a96569
8cb18730db03dd8727b2ff42ecfa7885b9e8dbe3c37c08b1ad0c67e629338b95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcbdd70a4-b533-4e87-84d2-c2122ca1cdc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5915
x-amzn-requestid: 1c6acb42-48cc-4113-a8d0-6a811cd16613
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xXaGUVoAMFwIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64156295-0edcaad90df031882fa7457c;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:04:53 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 6f6NSPPmIBAP_pxmZuHRz6WJJjnp3NIO26SNyKYhq2FikQkP5hOe7w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:58:52 GMT
age: 25432
etag: "a98933e2845c02158175a54d9648f12086a96569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90be67fd11de3a169f4de942f6418f3f
55bd99cc5490b60e7a653ffa5f2a8c288ef66e87
b07e34257bbaa41c941650a839adad82d4999d92ee62402dbec969d9464c89b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10959
x-amzn-requestid: a7e3f891-6f0e-48af-9a37-3cb8f9cae223
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xD8G-pIAMFagQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64156218-3334d770691739b77f855b0b;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:02:48 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: RmTQewe6KB0ictxZUj2umye1wlB6l5FkLEoXfGsR2adHPRU9KyXxWQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 03:55:26 GMT
age: 4038
etag: "55bd99cc5490b60e7a653ffa5f2a8c288ef66e87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05c7970e81559904d05b6e8cf693f085
709b01a360624eceafb1876f56378824aa4936b3
a4fd80c9bdce27961560d7c31e216706e9e32d42d1edd883e283c149505b3db0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7424
x-amzn-requestid: 9a2bd57a-40d2-4bc0-b4ca-183e9a928bdc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM-3aGPzoAMFj6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b782f-0dc56e4a7c4aaeb45b45c75b;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:50:39 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 8mTKClr9GKzzrm1TtEmMeBnOQfMLTO4dBuAO-fE4UEfV-SwrFbkjZQ==
via: 1.1 ec27e2bbc77d9805bead471453d2094c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:54:31 GMT
age: 7693
etag: "709b01a360624eceafb1876f56378824aa4936b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6de676f6856031e5c1baebe9166a8269
d81a4852f956999fa28a5f667ed73506843d0731
71f282ba594e454a2abf1c3700ade4d9461d6d48ac2726f746f3da5a63e29c38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9687
x-amzn-requestid: b7c8cd8c-6103-4aa4-9016-f02cf368908d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8JGHyEoAMFzJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73d3-2fb1fd1b5be3289047f8aed4;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:32:03 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: pwTgv5KbsBUYyFFmAaQkVuceVkWmy6S5-JrC5QptjI6eZYMu23hopg==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 26100
etag: "d81a4852f956999fa28a5f667ed73506843d0731"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: dd5a8417-ddd5-469d-aa84-e880f4b84464
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqKFGRsoAMFTGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6419570d-3f28a7502b56eda47dd82ba7;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: JImqyag05jmvEwsJSvKFVuisuS5KNKfr7xRuN0YPyneNXvVxKkFMzg==
via: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 05:35:55 GMT
age: 84409
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/googlefont/nunitosans/nunitosans-400-latin.woff2
200 OK 17 kB URL HTTP/2 static.criteo.net/design/googlefont/nunitosans/nunitosans-400-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16980, version 1.0\012- data
Hash 8a97f720d330e75ccdbda9ae0e9f5e90
8e4fee916581ab48d385187705667cebc7500afe
97d5a594e7f76c7e50045b67667fd6b74b268515efe6425097be1b2647079787
GET /design/googlefont/nunitosans/nunitosans-400-latin.woff2 HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://static.criteo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: text/plain; charset=UTF-8
content-length: 16980
last-modified: Thu, 08 Dec 2022 14:10:49 GMT
etag: "6391f069-4254"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/googlefont/nunitosans/nunitosans-700-latin.woff2
200 OK 17 kB URL HTTP/2 static.criteo.net/design/googlefont/nunitosans/nunitosans-700-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17116, version 1.0\012- data
Hash bcf3a3fb620dfbee774f84e2c8e71530
40a79d240acdd7e5a95e165515ac7c0958a37971
280aaa8929329764ac3213ca093c63505cfcc665347939c79905c426d33867c5
GET /design/googlefont/nunitosans/nunitosans-700-latin.woff2 HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://static.criteo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: text/plain; charset=UTF-8
content-length: 17116
last-modified: Thu, 08 Dec 2022 14:10:50 GMT
etag: "6391f06a-42dc"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/googlefont/nunitosans/nunitosans-700.css
200 OK 792 B URL HTTP/2 static.criteo.net/design/googlefont/nunitosans/nunitosans-700.css
IP
Hash c39028fe6df85d34c717a420521302e1
7bbe255b7334086e690bdd43b6ab9810a5db9243
89e0ab3de600173215291936275be7d383ce46aea0e2a424f795e441636082ba
GET /design/googlefont/nunitosans/nunitosans-700.css HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 14:10:50 GMT
etag: W/"6391f06a-67a"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 4ca3377c6eeae0803145191b588f5f13
18cdeefcb37977c91dd0b9c6f6f58dfd88255a9e
09895e51a0719eee4424c97ce3fb65db3c99f3604d402c1c44682f411e34f591
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4704
Cache-Control: max-age=107198
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641acad2-138"
Expires: Fri, 24 Mar 2023 10:49:22 GMT
Last-Modified: Wed, 22 Mar 2023 09:30:58 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 4ca3377c6eeae0803145191b588f5f13
18cdeefcb37977c91dd0b9c6f6f58dfd88255a9e
09895e51a0719eee4424c97ce3fb65db3c99f3604d402c1c44682f411e34f591
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4275
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Last-Modified: Thu, 23 Mar 2023 03:51:29 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 4ca3377c6eeae0803145191b588f5f13
18cdeefcb37977c91dd0b9c6f6f58dfd88255a9e
09895e51a0719eee4424c97ce3fb65db3c99f3604d402c1c44682f411e34f591
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3644
Cache-Control: max-age=106138
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 05:02:44 GMT
Etag: "641acad2-138"
Expires: Fri, 24 Mar 2023 10:31:41 GMT
Last-Modified: Wed, 22 Mar 2023 09:30:58 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 312
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24720_men_rio-ii_black_side.jpg&v=3&w=400&s=a5GcEHJFIMmebNbgw4lPifXG&b=400
200 OK 4.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24720_men_rio-ii_black_side.jpg&v=3&w=400&s=a5GcEHJFIMmebNbgw4lPifXG&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 30d9f6a27868eea22e2d53052eab6728
77a2e95a9ea5791590e3a3f030feef274f17bc68
35bd51f7c37ee9a6be4bf629086cfba1c44d886bb4d2d861ad9c0e5344148c06
GET /img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24720_men_rio-ii_black_side.jpg&v=3&w=400&s=a5GcEHJFIMmebNbgw4lPifXG&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=30210640
expires: Wed, 06 Mar 2024 20:53:25 GMT
date: Thu, 23 Mar 2023 05:02:43 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 4016
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24580_men_jonas_taupe_side.jpg&v=3&w=400&s=iJn-p1GvkdkaRsJMrNrOQTnm&b=400
200 OK 4.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24580_men_jonas_taupe_side.jpg&v=3&w=400&s=iJn-p1GvkdkaRsJMrNrOQTnm&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x180, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ac78ce1750c587a58a6b510f1b26034
f7a5a0fe1a8bee973f7d71350cb6cb5d1f7ea2d7
f75274622b34c246bd9b6f0a29dfad208faaed5a78f4362e5be778809157d2ae
GET /img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F4%2F24580_men_jonas_taupe_side.jpg&v=3&w=400&s=iJn-p1GvkdkaRsJMrNrOQTnm&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=30208003
expires: Wed, 06 Mar 2024 20:09:27 GMT
date: Thu, 23 Mar 2023 05:02:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 4182
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=1200&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2F54c62d6c323e4dba9769d0da56814ab4_309ffa03-7400-4502-88c3-64cbb62bfbd3.jpg&v=3&w=1200&s=P0MBT7TTKKuMdnNG2o1ViHYS
200 OK 35 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=1200&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2F54c62d6c323e4dba9769d0da56814ab4_309ffa03-7400-4502-88c3-64cbb62bfbd3.jpg&v=3&w=1200&s=P0MBT7TTKKuMdnNG2o1ViHYS
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7d4ea15354bb7e0db22c45bbcffdd1aa
623ca16ae89c7b6087eff735c4c50481f6ec9006
dea7d8eaaa7c8db8970fe51f204dc7364e2d32f7cd0d190b4cc73bc660cdb6f4
GET /img/img?h=1200&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2F54c62d6c323e4dba9769d0da56814ab4_309ffa03-7400-4502-88c3-64cbb62bfbd3.jpg&v=3&w=1200&s=P0MBT7TTKKuMdnNG2o1ViHYS HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=29776079
expires: Fri, 01 Mar 2024 20:10:43 GMT
date: Thu, 23 Mar 2023 05:02:43 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 35066
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F3%2F23493_men_jarrod_taupe-suede_side.jpg&v=3&w=400&s=NH_x7VNubml2D8jzNkcSNxFJ&b=400
200 OK 5.3 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F3%2F23493_men_jarrod_taupe-suede_side.jpg&v=3&w=400&s=NH_x7VNubml2D8jzNkcSNxFJ&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x179, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ee766ed0565e7739023477ea6ed1bbb4
71335c79a6a25f336936bc2bf6c845130ef100ff
7ec3e8b567f58659ce9f560478d21e84efc471a2bc617b38c3f2efacf9284036
GET /img/img?c=3&cq=256&h=400&m=0&partner=97215&q=80&r=0&u=https%3A%2F%2Feu.magnanni.com%2Fmedia%2Fcatalog%2Fproduct%2F2%2F3%2F23493_men_jarrod_taupe-suede_side.jpg&v=3&w=400&s=NH_x7VNubml2D8jzNkcSNxFJ&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=30207995
expires: Wed, 06 Mar 2024 20:09:19 GMT
date: Thu, 23 Mar 2023 05:02:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 5268
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=556&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2Fe6193988584d4a4daffc938e5e988997_magnanni.logo-2x.jpg&v=3&w=196&s=ZUk4sEP4FhLN4RiWPevNMFpX
200 OK 1.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=556&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2Fe6193988584d4a4daffc938e5e988997_magnanni.logo-2x.jpg&v=3&w=196&s=ZUk4sEP4FhLN4RiWPevNMFpX
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 196x73, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 55497bc90d1eb71b25042646bf7255e9
fffa9b58536053d84e075d73e043c29c6a53c77c
53ab7435ce2e5ffc47c5ca57d7d2ed599279a6e4dd5a39f6fe9e7deb2e82a37b
GET /img/img?h=556&m=0&partner=97215&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F97215%2F230227%2Fe6193988584d4a4daffc938e5e988997_magnanni.logo-2x.jpg&v=3&w=196&s=ZUk4sEP4FhLN4RiWPevNMFpX HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=29775598
expires: Fri, 01 Mar 2024 20:02:43 GMT
date: Thu, 23 Mar 2023 05:02:43 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 1246
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=913tKyQZZAgpMUmg9__bTmPkCfJe-dnMQt5YNXJbxVrVTmgsvgBb7BLAgtwIkVLf9-XqxZoLwu7hM74X3zjPxFBPduEqwV9TtUvrK8hqILOBadnR6-kAD6-XZ6QRiFuUfy-m4JIKGgJlElU1aL4vLTCXuOw7jFUzBiAYenfc6nWZGEc1R3S9xX0DDKRQxuJnZa-GYxvEyFBtX4Ujshob-uQDnvgo5GfXvxA5WKcg5LHm99cMLIJ6eRi6aSPG-kPu34qEcuB5itBNSQct3dWtzC9PGhTLkuCPBAonBTd0UqPINvsruOhnn12HhXuvY65WirgJg6ExoJ5eiVYthoyr2MHor4eg9mE4vjgxuhk0QnJ1lZQqii3KKWeKJCJPesc_QSEaZ35fpzfWHPZLCJAgJ1tfEK4fUAmlnxsaPgQDhI29MUt5
200 OK 514 B URL HTTP/2 cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=913tKyQZZAgpMUmg9__bTmPkCfJe-dnMQt5YNXJbxVrVTmgsvgBb7BLAgtwIkVLf9-XqxZoLwu7hM74X3zjPxFBPduEqwV9TtUvrK8hqILOBadnR6-kAD6-XZ6QRiFuUfy-m4JIKGgJlElU1aL4vLTCXuOw7jFUzBiAYenfc6nWZGEc1R3S9xX0DDKRQxuJnZa-GYxvEyFBtX4Ujshob-uQDnvgo5GfXvxA5WKcg5LHm99cMLIJ6eRi6aSPG-kPu34qEcuB5itBNSQct3dWtzC9PGhTLkuCPBAonBTd0UqPINvsruOhnn12HhXuvY65WirgJg6ExoJ5eiVYthoyr2MHor4eg9mE4vjgxuhk0QnJ1lZQqii3KKWeKJCJPesc_QSEaZ35fpzfWHPZLCJAgJ1tfEK4fUAmlnxsaPgQDhI29MUt5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c205d544aa600a4298cb8131af1d870c
986a79a0b30a6914cc4babf4edb0e6f8705a3e6e
816498b2954d6314d64f5bafc596a64130de8b023a45acc390c79871dca15e2c
GET /delivery/lg.php?cppv=3&cpp=913tKyQZZAgpMUmg9__bTmPkCfJe-dnMQt5YNXJbxVrVTmgsvgBb7BLAgtwIkVLf9-XqxZoLwu7hM74X3zjPxFBPduEqwV9TtUvrK8hqILOBadnR6-kAD6-XZ6QRiFuUfy-m4JIKGgJlElU1aL4vLTCXuOw7jFUzBiAYenfc6nWZGEc1R3S9xX0DDKRQxuJnZa-GYxvEyFBtX4Ujshob-uQDnvgo5GfXvxA5WKcg5LHm99cMLIJ6eRi6aSPG-kPu34qEcuB5itBNSQct3dWtzC9PGhTLkuCPBAonBTd0UqPINvsruOhnn12HhXuvY65WirgJg6ExoJ5eiVYthoyr2MHor4eg9mE4vjgxuhk0QnJ1lZQqii3KKWeKJCJPesc_QSEaZ35fpzfWHPZLCJAgJ1tfEK4fUAmlnxsaPgQDhI29MUt5 HTTP/1.1
Host: cat.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 05:02:43 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 1624916
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 513 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash f3eb26aeca9f5646cc5aa6fa23e74977
22f186048a2610cd323622c61244ff49bf9feaa6
5cc073c826e98e67941bd016ad2c3f6d0ae42bd37226affe5c89e1eda1f9ac84
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 23 Mar 2023 05:02:44 GMT
date: Thu, 23 Mar 2023 05:02:44 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-IB1W9q50Y-eGDo3hncSvhg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 513
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 947 B URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1397)
Hash fbfc432630ade396cef4b2ebd6c931ea
579b9155027a4c95fee33001d6e2cc209feab4c4
0cc5ac7cd37e8ea85f549c8c648c1505385554a69c8457f286301825545b1789
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=wFA5BgOtFiuW5PPQsRm2QxWwApXgJSIOvnx31wbH-zOI57g74BkN42lwqrKcGEdFAD9nAik43syszCjiJJiQqqLv3Hyc8EBAJce1UQBW5Fi9adKBDtEkpmGbEs9c1qpIMNnVqPrLNUhUfCJ-IKZsNnieDr9_oVM9ojU9_hTHtEiGGz7qyNrrMeqgE1HrwiKF0wqrlGPGb-M63NtxOFnpOWPr9kFAXYQe9cF8J2jHlF--bYASMBgtlQfEFW3qgQpseV-TTA&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=wFA5BgOtFiuW5PPQsRm2QxWwApXgJSIOvnx31wbH-zOI57g74BkN42lwqrKcGEdFAD9nAik43syszCjiJJiQqqLv3Hyc8EBAJce1UQBW5Fi9adKBDtEkpmGbEs9c1qpIMNnVqPrLNUhUfCJ-IKZsNnieDr9_oVM9ojU9_hTHtEiGGz7qyNrrMeqgE1HrwiKF0wqrlGPGb-M63NtxOFnpOWPr9kFAXYQe9cF8J2jHlF--bYASMBgtlQfEFW3qgQpseV-TTA&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=wFA5BgOtFiuW5PPQsRm2QxWwApXgJSIOvnx31wbH-zOI57g74BkN42lwqrKcGEdFAD9nAik43syszCjiJJiQqqLv3Hyc8EBAJce1UQBW5Fi9adKBDtEkpmGbEs9c1qpIMNnVqPrLNUhUfCJ-IKZsNnieDr9_oVM9ojU9_hTHtEiGGz7qyNrrMeqgE1HrwiKF0wqrlGPGb-M63NtxOFnpOWPr9kFAXYQe9cF8J2jHlF--bYASMBgtlQfEFW3qgQpseV-TTA&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 05:02:45 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 0 B URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/adchoices_en.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/adchoices_en.svg
IP
GET /flash/icon/adchoices_en.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:27:58 GMT
etag: W/"5e42b9ee-759"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Thu, 23 Mar 2023 05:02:43 GMT
date: Thu, 23 Mar 2023 05:02:43 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=4KdZNzU6AJY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=u0IUJ9hI-pk; Domain=.youtube.com; Expires=Tue, 19-Sep-2023 05:02:43 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+907; expires=Sat, 22-Mar-2025 05:02:43 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/googlefont/nunitosans/nunitosans-400.css
200 OK 0 B URL HTTP/2 static.criteo.net/design/googlefont/nunitosans/nunitosans-400.css
IP
GET /design/googlefont/nunitosans/nunitosans-400.css HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 05:02:44 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 14:10:49 GMT
etag: W/"6391f069-67a"
expires: Sun, 17 Mar 2024 05:02:44 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
54.230.111.3
178.250.1.6
23.36.77.32
104.17.24.14