r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17276
Expires: Sun, 16 Oct 2022 20:34:10 GMT
Date: Sun, 16 Oct 2022 15:46:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 16 Oct 2022 14:50:34 GMT
Expires: Sun, 16 Oct 2022 15:09:33 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ckqq15esWXdc1EDhAF3wwjfiLePQJnnoRWPZTR_UTY2NogagdXKCmQ==
Age: 3339
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57d0f62d9bd29668b94a513fa45d18e
d7cb263502e21f9235b4523a596e2138d22042ec
df7acd4fe34cc9c4945a5d83ef538105a73dfc1a8b485bc7a62488c5406b1294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF7ACD4FE34CC9C4945A5D83EF538105A73DFC1A8B485BC7A62488C5406B1294"
Last-Modified: Sat, 15 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7231
Expires: Sun, 16 Oct 2022 17:46:45 GMT
Date: Sun, 16 Oct 2022 15:46:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cQs9ixpg6FHMYqXEfePU763OBmrOXtgjNf18MxBddbpdidO2E/gDhaTa1vkSQP6nwrZrUMrAO9Q=
x-amz-request-id: K0F8KEPZ3ZNHK619
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 16 Oct 2022 15:03:03 GMT
age: 2591
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
xcigamesdd.com/super-mario-odyssey-v327/
200 OK 36 kB URL HTTP/1.1 xcigamesdd.com/super-mario-odyssey-v327/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (42168), with CRLF, LF line terminators
Hash 2a49aa4bf126da97a2cb1a34567fc9dd
c978dd57cf6f60400fe43cf4fa4028919561db56
2a4c3cb87b8976215ee0593c4f1c5e92ebaf5bfb35be739fddb7558da77b2aa9
GET /super-mario-odyssey-v327/ HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068; HttpOnly
content-type: text/html; charset=UTF-8
x-pingback: http://xcigamesdd.com/xmlrpc.php
link: <https://xcigamesdd.com/wp-json/>; rel="https://api.w.org/", <https://xcigamesdd.com/wp-json/wp/v2/posts/4189>; rel="alternate"; type="application/json", <https://xcigamesdd.com/?p=4189>; rel=shortlink
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: 229_HTTP.200,229_post,229_URL.b932db8f0604fc879ada0fc30a722b1d,229_Po.4189,229_
cache-control: public, max-age=0
expires: Sun, 16 Oct 2022 15:46:13 GMT
x-litespeed-cache: miss
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.7
200 OK 12 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.7
IP
File type ASCII text, with very long lines (65371)
Hash be7f4c7d5b01eeb9658f928317e6d6b4
8f7d25b03481d045dc2f87119959459630265351
ba0ad71c3596a80cc6dc24f6c8c4ae90693cdcda8c02c314cec234860f785b04
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.4.0.7 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 22:11:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11759
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 12 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash 9f76c05d4aec8a23bbb9131800060916
ba854132574f3add765c016ff6cef2a30bddc5e0
c73bcff8e403046219e8f9dfb99e029b8d58099b8c5fb5f6508127702fd1b275
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Sat, 10 Sep 2022 21:42:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11658
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/allow-webp-image/public/css/allow-webp-image-public.css?ver=1.0.1
200 OK 98 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/allow-webp-image/public/css/allow-webp-image-public.css?ver=1.0.1
IP
Hash e6094661d8923e95b233019ebff7c8f0
cfd836d385d475baffee45d85cfeb9bb36e70d9e
547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a
GET /wp-content/plugins/allow-webp-image/public/css/allow-webp-image-public.css?ver=1.0.1 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Tue, 22 Mar 2022 02:01:23 GMT
accept-ranges: bytes
content-length: 98
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/css/font-awesome/css/font-awesome.min.css?ver=6.0.2
200 OK 4.7 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/css/font-awesome/css/font-awesome.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (20604)
Hash 2cb90fac97922f17341da79b40c6fd8b
d5b9b24bff8cba81e5c345483e7a107414325b43
dc1a9cc5dbad4697419ba2abcf7a4789657a718177f1974b6e36838dfac517e0
GET /wp-content/plugins/responsive-accordion-and-collapse/css/font-awesome/css/font-awesome.min.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Tue, 11 Oct 2022 13:41:41 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4653
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/css/bootstrap.min.css?ver=6.0.2
200 OK 9.8 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/css/bootstrap.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (57835), with no line terminators
Hash 399ba5b3f84b6def00ce6b87e33fbb50
665985a193f8d9f3df9a8639adaebb401c03d75c
1bccaeb95d636659690f1220233e083ce31272d50ca7142a27fb9c59b8fdc525
GET /wp-content/plugins/download-manager/assets/bootstrap/css/bootstrap.min.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 15:20:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 9771
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/download-manager/assets/css/front.css?ver=6.0.2
200 OK 12 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/css/front.css?ver=6.0.2
IP
File type ASCII text, with very long lines (482)
Hash a4c7398634fdfefa2438148aac1c00d0
45d3dbee49ac5d499a6d4429f98e78e5f15b9741
6f0f132936a00fa08dd112b80ce1058290821c853896e4594844647aee6a628c
GET /wp-content/plugins/download-manager/assets/css/front.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 15:20:40 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11716
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.8.0
200 OK 20 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.8.0
IP
File type ASCII text, with very long lines (42471), with CRLF line terminators
Hash e1a90e1a59f0501563ad5915ad7d3861
bb806e4914f278c7e77ce186a5d73fff6b9aff88
0d878b4af92bf67eaaf8fb1d52d4ae908d31d3cd8a6660328acb15dac84b39b3
GET /wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.8.0 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Tue, 28 Jul 2020 23:30:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 20413
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.0.2
200 OK 491 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.0.2
IP
Hash 9dc75495a901b0f89baf50f2fb963f4e
948f3e9c570f041c440a58cccd2485a1b09b203e
b5d3cd652f4d5c2a8d565ed3cb3b9fec781ddaa0d296ce4fc07a628e97a6513d
GET /wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Mon, 27 Jun 2022 03:09:31 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 491
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/css/bootstrap-front.css?ver=6.0.2
200 OK 1.6 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/css/bootstrap-front.css?ver=6.0.2
IP
Hash 80bced94327e5768680e9eaa99458c7a
a7a4a0b80521d015572c968a73bf4f666ecd3300
02a566fe43f6cebf0d491eb007147939c867a42af384bc5d276477aca528cfc5
GET /wp-content/plugins/responsive-accordion-and-collapse/css/bootstrap-front.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Tue, 11 Oct 2022 13:41:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1572
date: Sun, 16 Oct 2022 15:46:13 GMT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 15:46:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xcigamesdd.com/wp-content/themes/orbital/assets/css/main.css?ver=6.0.2
200 OK 11 kB URL HTTP/1.1 xcigamesdd.com/wp-content/themes/orbital/assets/css/main.css?ver=6.0.2
IP
File type ASCII text, with very long lines (55626)
Hash 8b0b80e1670e19e21b21518fc248ecdd
5d9eff9ea9ae4875fff2e8d9f5a005dc6e926be5
ad4698f12c9b9c535bd1d7077065806bf3a9690c1a1a02f5dc66afd9b1dc1bb3
GET /wp-content/themes/orbital/assets/css/main.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11233
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.4
200 OK 1.8 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.4
IP
File type ASCII text, with very long lines (8319)
Hash 0689a6c3f80a5459a071f1011cdf3960
f7422ba0692c1615df809d59cda5d66b992d8061
cb30e5065929317605de07d6d5b68dddf00674132ffd71e153f844d469fe5ae5
GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.4 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 15:28:51 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1786
date: Sun, 16 Oct 2022 15:46:13 GMT
arsnivyr.com/1?z=5382937
200 OK 3.5 kB IP
File type ASCII text, with very long lines (7782)
Hash ed86106deddfb567b9d7f5136bb9ff06
475c4c042b5576f8a65e98497e8ef0e5ebaa810a
18bc367a65b11e8d7db3ed88d5fc72f76ee07c6205b8cc25bc40b17719faa10e
Analyzer Verdict Alert quad9 Sinkholed
GET /1?z=5382937 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 15:46:14 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
X-Trace-Id: 18a53c799987fc25726d190f77677ad5
Access-Control-Expose-Headers: X-Sc
X-Sc: gobSQx6ms8HHydUI1GWTnMWNOeJ_aGjbBtRfp_LyEk3CTLbPTsb2e48zXfdvh0kE6LRb20NMxN0hYxOueFdV_Sr_Czg=
Set-Cookie: scm=1; expires=Mon, 16 Oct 2023 15:46:14 GMT; secure; SameSite=None
OAID=7a56928709dd40bdb6ca55272e1b84a0; expires=Mon, 16 Oct 2023 15:46:14 GMT; secure; SameSite=None
oaidts=1665935174; expires=Mon, 16 Oct 2023 15:46:14 GMT; secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
use.fontawesome.com/releases/v5.7.2/js/all.js?ver=6.0.2
200 OK 402 kB URL HTTP/1.1 use.fontawesome.com/releases/v5.7.2/js/all.js?ver=6.0.2
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 402 kB (402168 bytes)
Hash 2e77c777e56da87903605efc63a17a2e
1609e549e4bda4d6c0d185ddc8f0b302e8597c32
076bf0a40668e22b3cc9070631537f2d7812408717a40f2f2cee22a21342020d
GET /releases/v5.7.2/js/all.js?ver=6.0.2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 15:46:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: IZAIH2sj/QtTwwD78tVqgy8CloQYaLoVuk7UcVxnrBAFwta0olVp64gWX7dKVTUb/F2nvC7RXsM=
x-amz-request-id: KDYTXZ4VZKYNT6C6
Last-Modified: Wed, 30 Jun 2021 15:45:57 GMT
ETag: W/"3321acfaaf879848a1f6773e691e2dd0"
Cache-Control: max-age=31556926
CF-Cache-Status: HIT
Age: 1360577
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e9MNuvjb4u0qjXQUhImmXGyBdBC6%2BHsxwv6F2q2Gbed1UWwFuWbonmRnKnW5CZ8Umpoa7eFeibIUZpIx3Bnr6LBsTTjuYRPRtxr5KpvW%2FOgmDXDMbLN2%2BixiIZoVp%2BaWboT4vbxS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75b1ed198aa77701-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/js/bootstrap.min.js?ver=6.0.2
200 OK 15 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/js/bootstrap.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (62161)
Hash e8bd4e0356f4299f1942512750a0c38d
e179be7819f0b4eb5bf5f839480c1c172a7c63e8
3348f65332b371e55ab83946af39c312aff2a8839a0e08e3dba519cbb4d5a099
GET /wp-content/plugins/download-manager/assets/bootstrap/js/bootstrap.min.js?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 15:20:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 15273
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash c41f3a82e911de81a1817131069bc7d2
1e883290a0b794916cead41e5f0705716fd77b89
e9791f24770f098ea30bb4d25e2e10bdedb97132d0bbf7d2bd79eedac22efa27
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4168
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/js/popper.min.js?ver=6.0.2
200 OK 7.5 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/bootstrap/js/popper.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (21084)
Hash 7a1fb45f4bd7d2ab7ba4777f7863ecd5
d55a6b88c72c1630e39720c65118ae569fd9120b
c62daebc713e14af685e6669e543830fd4bf2aba63f296f9122ab6c821c38682
GET /wp-content/plugins/download-manager/assets/bootstrap/js/popper.min.js?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 15:20:40 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 7477
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/allow-webp-image/public/js/allow-webp-image-public.js?ver=1.0.1
200 OK 475 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/allow-webp-image/public/js/allow-webp-image-public.js?ver=1.0.1
IP
Hash f18f244bed87a1ae2819af17fb2766cb
07add1b1b35612815df2f7a491dff60ab34507f5
8b772d78e109484da06c428e7c6f3de1ab9f9128313cad7be43088c2a70d7755
GET /wp-content/plugins/allow-webp-image/public/js/allow-webp-image-public.js?ver=1.0.1 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 22 Mar 2022 02:01:23 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 475
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/download-manager/assets/js/front.js?ver=3.2.57
200 OK 11 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/js/front.js?ver=3.2.57
IP
File type ASCII text, with very long lines (4122)
Hash 3cbd85c841637aad5fb79be852864447
1101da7834adea5fbd347c9012921dc50ae61853
74cec79ecb31abcb3d25e5db47719ae1ed103b8f0381ef7448b91701c1828845
GET /wp-content/plugins/download-manager/assets/js/front.js?ver=3.2.57 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 15:20:41 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 10932
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 554969c8ed0e4b5eece1261c4e1e9cd0
3b514b21c2e26b2caa15054e43ed00184a8ebc38
4a10709ca76c5112fbaf69e065b4ef93dd37bcffd4ae39b351e56d40c9322123
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 30969
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.4
200 OK 4.6 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.4
IP
File type ASCII text, with very long lines (1003)
Hash b368ca801928cdcb87d5162d1521af98
ed36cd9e6ad5122f9bc4f59cb87359c7ed52d404
91230b93eaa7ae02f4ce76d51e89252d545954e87b014e19c838021afd73ae8b
GET /wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.4 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 15:28:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4587
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/contextual-related-posts/css/rounded-thumbs.min.css?ver=3.2.3
200 OK 463 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/contextual-related-posts/css/rounded-thumbs.min.css?ver=3.2.3
IP
File type ASCII text, with very long lines (1451), with no line terminators
Hash 245e525ddd673a0a9a7ebe8a1a32eb00
68410696a60f51dcb5df8fa9d0c0ef96879197e8
94db2ea5cd36e9dd7e7758bd12e65e7b19d96e87488b5aadafccde60884f917a
GET /wp-content/plugins/contextual-related-posts/css/rounded-thumbs.min.css?ver=3.2.3 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 16:48:09 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 463
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/download-manager/assets/fontawesome/css/all.min.css?ver=6.0.2
200 OK 21 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/download-manager/assets/fontawesome/css/all.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (65317)
Hash 5e17a5be51d5306c1f0cf06584857b5a
012e4548497b1183ed61e76adc32921f1d71df61
f1d26d7b6a4d8c71f0397878b2d70bb7ac05e89d59f52ee30331e9a12ee9e163
GET /wp-content/plugins/download-manager/assets/fontawesome/css/all.min.css?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 15:20:41 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 20848
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/koko-analytics/assets/dist/js/script.js?ver=1.0.34
200 OK 901 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/koko-analytics/assets/dist/js/script.js?ver=1.0.34
IP
File type ASCII text, with very long lines (1706)
Hash 2538ff8c73971083371620417f177f7f
bc3766d3fc416907aaa20a242641a45c26081df7
e6eea4b52f9fd3525887378ead0d048b603cac0a117bd2272a96ae131c0352d4
GET /wp-content/plugins/koko-analytics/assets/dist/js/script.js?ver=1.0.34 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 15:28:55 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 901
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.7
200 OK 6.7 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.7
IP
File type ASCII text, with very long lines (12198), with CRLF line terminators
Hash 2e22c8149399e73ff0da65402d803699
129f97cae31d3d3dca417341ec415d2303dce30b
114ee3bb4212ea8f6d7d9d10c786a684674a4973b9b938c21b0f7e8aaa5b5971
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.4.0.7 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 22:11:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 6730
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.8.0
200 OK 46 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.8.0
IP
File type Unicode text, UTF-8 text, with very long lines (32126)
Hash 0aec5f99695007286dc53e9e8a1c2c70
80eeeb6ee67b570ee83e254e566ab5ae40191e13
d612d876e075d3811706cc42f6ec102c9ead6cacc80e574f6f8c5f17c6bd43e8
GET /wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.8.0 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 28 Jul 2020 23:30:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 46186
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 9939da8da9b306b91ddc5c68ea402d66
4cd4ea5f2dcd09fec713c36cb1c1c31ace0373b5
63b97ebb1748143ca6093d63ccdb14b2748f002df4caddfaa15c1173cb2c4942
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:14 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 2439
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
200 OK 1.7 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP
File type ASCII text, with very long lines (4875)
Hash b7fad5256cf7aca9fd70a62bb93844c6
903085b7db8cb10da60739104d2b8b500d7bdf57
d35186efbbda488c7ad9e5b7c44d5d340e96c7823e609d791ef0d4bd29b4afd6
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:15 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1657
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
200 OK 3.9 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP
Hash 744d07a5a18516a5eda2c915c57a8d3e
848f74eb379c38dd0a1928f07673804e0f08d5a1
39243a0d7eff0b8436162e5964241b334691314c7dee690b05e696c48f354c14
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:17 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 3863
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0
200 OK 6.0 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0
IP
File type ASCII text, with very long lines (16109), with no line terminators
Hash e1eac240de23271e5a12f769c9c3e307
8f72405f81d6da160bd92473762be6590da8821f
ef1b6af6826be7419985283ef0c69093e0e5c06cbd499c8ef13d4c07ffc8c5f2
GET /wp-includes/js/jquery/jquery.form.min.js?ver=4.3.0 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 5952
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/easy-affiliate-links/dist/public.js?ver=3.7.0
200 OK 7.2 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/easy-affiliate-links/dist/public.js?ver=3.7.0
IP
File type ASCII text, with very long lines (1004)
Hash 6d6bc1b948a9e8016ed5733b65f0f8d2
9dde6af420a147c905f5b2aaf35753c97f8e322d
f92fbcbd02da631a978569076d1f2c6987b797322747d876ba8e3f9486b56737
GET /wp-content/plugins/easy-affiliate-links/dist/public.js?ver=3.7.0 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sun, 04 Sep 2022 01:03:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 7150
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/uploads/2020/09/Super-Mario-Odyssey.jpg
200 OK 51 kB URL HTTP/2 xcigamesdd.com/wp-content/uploads/2020/09/Super-Mario-Odyssey.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 274x460, components 3\012- data
Hash e610b4c72e7762c0c8bc00cfae9b2d1f
94d6014a2de0eaf16fe88e36c37177ab0689cdd4
18b4c590e2f4d9215d5a5b7455fe3719ac29a35928c66e4243f6d997143fa694
GET /wp-content/uploads/2020/09/Super-Mario-Odyssey.jpg HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Mon, 13 Feb 2023 15:46:13 GMT
content-type: image/jpeg
last-modified: Wed, 30 Sep 2020 09:42:25 GMT
accept-ranges: bytes
content-length: 51290
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
xcigamesdd.com/wp-content/uploads/2020/07/mega.png
200 OK 18 kB URL HTTP/2 xcigamesdd.com/wp-content/uploads/2020/07/mega.png
IP
File type PNG image data, 368 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 83e8f8608d41ab78b1576cbfd4b88ecb
39024b7093764cc1bbbd964a70da3aabf1db7bf3
52f170c9a428acc1b5c7873dd2ec43bc9e6705c7fd29980581d09af8c472ee29
GET /wp-content/uploads/2020/07/mega.png HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Mon, 13 Feb 2023 15:46:13 GMT
content-type: image/png
last-modified: Wed, 29 Jul 2020 00:05:11 GMT
accept-ranges: bytes
content-length: 18354
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion-custom.js?ver=6.0.2
200 OK 14 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion-custom.js?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 9c7b2f3263a89dfa926be94a632a9ea9
0e0122f253a7b88f92db5d63f2d4fa984b422b49
dacfba7cd7237777205ffce28936dea4cb0d9dac5c009cf8aeeb3fc78797a923
GET /wp-content/plugins/responsive-accordion-and-collapse/js/accordion-custom.js?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 13:41:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 13615
date: Sun, 16 Oct 2022 15:46:13 GMT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0efa623bed47d42f69be9e523e7725f4
b301c00ee9ab5778b326edea3bc274f8ae46da15
c7d4afc16dd19b5216a9c34cf3048b4e6dff056608666d6d40c9f5eeeae309a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 15:46:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.0.2
200 OK 206 B URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.0.2
IP
File type ASCII text, with very long lines (409), with CRLF line terminators
Hash c9fc246cc82759202472df0d2b598db4
1e7c1dac85ee36c0becb07515ad602946efb2e21
7ffd4a4d3620f7b6e868fdb809fd5aa47330241f03b3b991bde3ad5c03317ca2
GET /wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 13:41:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 206
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/themes/orbital/assets/js/navigation.js?ver=20190101
200 OK 0 B URL HTTP/1.1 xcigamesdd.com/wp-content/themes/orbital/assets/js/navigation.js?ver=20190101
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-length: 0
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
xcigamesdd.com/wp-content/themes/orbital/assets/js/social.min.js?ver=20190101
200 OK 2.6 kB URL HTTP/1.1 xcigamesdd.com/wp-content/themes/orbital/assets/js/social.min.js?ver=20190101
IP
File type ASCII text, with very long lines (6521), with no line terminators
Hash e4cd24c4790b9aa939d63faf551e7cea
356cccc76e8254e79ca93e547a1b278c02c14c8f
b388508e87fecdb8b25850685793e09ca2608db1990ad31ced923795e24d16ca
GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 2622
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/themes/orbital/assets/js/main.js?ver=20190101
200 OK 1.4 kB URL HTTP/1.1 xcigamesdd.com/wp-content/themes/orbital/assets/js/main.js?ver=20190101
IP
Hash 2f0b0bb5aa7056365134163018b2c575
3ae8af3913ac9842c2b10fe1b7492a36849dbf33
db0f85bf0e90832fe96638d57f3cfae9b3904a0076366324d97c6b454b4f3d83
GET /wp-content/themes/orbital/assets/js/main.js?ver=20190101 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1448
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-includes/js/comment-reply.min.js?ver=6.0.2
200 OK 1.3 kB URL HTTP/1.1 xcigamesdd.com/wp-includes/js/comment-reply.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (2946)
Hash 1cfd4f485ffd20e7ee7693364fef33f9
a8c5d35ad20664ccfe03d7acfcbdb0a1e28d3fd8
b433efd57400d409a207820e22b93662fa48a0737a96eb44a4c6ce3b46ee7403
GET /wp-includes/js/comment-reply.min.js?ver=6.0.2 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 21:42:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1349
date: Sun, 16 Oct 2022 15:46:13 GMT
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 16 Oct 2022 15:07:43 GMT
Cache-Control: max-age=3600
Expires: Sun, 16 Oct 2022 15:16:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 12-uxjDXVWCcV61Uwia2_iTHSdh5jzDDHLTBA8mLnTh1iH25c_5xUA==
Age: 2311
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f309b801fdcff49c832652cf9f67fed
f0b6a27d0995fd7fd40f23ee385f8fe1fd752c13
53663428a1b73aeee2fc68815b072ad9ced52bfd3726416aaab332c29eb3aab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 15:46:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xcigamesdd.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.4
200 OK 1.1 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.4
IP
File type HTML document, ASCII text, with very long lines (3102)
Hash bef20d56c920050759600f6a69638e38
d29ad33842c8879355e9f3fb8a53a5f7570e9375
ff2622bcaf53c73f4598e54038b16dd1f3e8c0605d5c7f41c33f9c2ddab9adfb
GET /wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.1.4 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 15:28:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1076
date: Sun, 16 Oct 2022 15:46:13 GMT
xcigamesdd.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664421472
200 OK 3.1 kB URL HTTP/1.1 xcigamesdd.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664421472
IP
Hash 50d912e2d0b9482f62619f6f29b0d519
be42483c21612c384532ca8e122b7fb8ed8ef54e
504c01b2ee73c18370d0e074a899b55655c1c4c7a18f4ec1b8c2d492b928e8c2
GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664421472 HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Mon, 16 Oct 2023 15:46:13 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 03:17:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 3067
date: Sun, 16 Oct 2022 15:46:13 GMT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0efa623bed47d42f69be9e523e7725f4
b301c00ee9ab5778b326edea3bc274f8ae46da15
c7d4afc16dd19b5216a9c34cf3048b4e6dff056608666d6d40c9f5eeeae309a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 15:46:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
linkmoe.org/js/full-page-script.js
200 OK 759 B URL HTTP/1.1 linkmoe.org/js/full-page-script.js
IP
File type C source, ASCII text, with very long lines (2161)
Hash 54c907e14e23f8ce889d1c1f08c5a08c
d62dc80f03342ba9f129b9ebae6d3a71a4d32812
fe51e89770bbad259e95e979095088225f031c6c2047c7abaa45a05fd70afc18
GET /js/full-page-script.js HTTP/1.1
Host: linkmoe.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=2592000
expires: Tue, 15 Nov 2022 15:46:14 GMT
content-type: application/javascript
last-modified: Tue, 30 Nov 2021 01:45:16 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 759
date: Sun, 16 Oct 2022 15:46:14 GMT
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
xcigamesdd.com/super-mario-odyssey-v327/
200 OK 0 B URL HTTP/1.1 xcigamesdd.com/super-mario-odyssey-v327/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /super-mario-odyssey-v327/ HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
Cookie: __wpdm_client=c11170dca089cc3d7eb6d01a7f1a1068
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
x-pingback: http://xcigamesdd.com/xmlrpc.php
link: <https://xcigamesdd.com/wp-json/>; rel="https://api.w.org/", <https://xcigamesdd.com/wp-json/wp/v2/posts/4189>; rel="alternate"; type="application/json", <https://xcigamesdd.com/?p=4189>; rel=shortlink
cache-control: public, max-age=0
expires: Sun, 16 Oct 2022 15:46:13 GMT
x-litespeed-cache: hit
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
ardslediana.com/5/5260642/?oo=1&aab=1
200 OK 1.3 kB URL HTTP/1.1 ardslediana.com/5/5260642/?oo=1&aab=1
IP
File type JSON data\012- , ASCII text, with very long lines (2698), with no line terminators
Hash 877a041e5c87952af0b8fab84fcbfdaf
43ba0deeeaf0e7a28be51673ff1ae1f01cd64526
2989b18a7652eb87e4808b1156252cc34fec630237e4b766fc42a8703af2b171
Analyzer Verdict Alert quad9 Sinkholed
GET /5/5260642/?oo=1&aab=1 HTTP/1.1
Host: ardslediana.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: fbe54499df78876d570fee772d95f36c
Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:15 GMT; path=/
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:15 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
ocsp.comodoca.com/
200 OK 471 B IP
Hash 97872df40d38edb36ecc2056f0459a43
db01bdb48a765269f5efae12d06dbf6312bfaac3
b3b722f3bdfdf040acde12dc22e4432a35c65115d58356a73b0cde872e2e20ef
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 13 Oct 2022 18:36:58 GMT
Expires: Thu, 20 Oct 2022 18:36:57 GMT
Etag: "db01bdb48a765269f5efae12d06dbf6312bfaac3"
Cache-Control: max-age=355241,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75b1ed1b881bb4f4-OSL
pl17661227.profitablegatetocontent.com/849ad080ebdaa9ca9dd84f2d9f8c2306/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17661227.profitablegatetocontent.com/849ad080ebdaa9ca9dd84f2d9f8c2306/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25086), with no line terminators
Hash 4250c61c9525572009f35be71b6e2303
009fa4b1fb4602edfd42d6344c3a5239fa7845d4
6871f05fb97c6248e1406edeab3849a73548c7a81b4039f1b761fa2439734a57
Analyzer Verdict Alert quad9 Sinkholed
GET /849ad080ebdaa9ca9dd84f2d9f8c2306/invoke.js HTTP/1.1
Host: pl17661227.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4d1d2bd1dfa9c983f041ea510059738a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ardslediana.com/tag.min.js
200 OK 25 kB URL HTTP/1.1 ardslediana.com/tag.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1661fa377064157355b6923f4406099d
385562eed5557ca6bf270ab83787d0c704632a0a
65c976c9ffe8c38e08f80d387966359a2dc0ca44fb02f2452ec685d28ce946f9
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: ardslediana.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 24583
Connection: keep-alive
Content-Encoding: gzip
X-Trace-Id: dc7d073d3d1fc449e6393ae46e808328
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Accept-Ranges: bytes
Last-Modified: Mon, 10 Oct 2022 14:15:29 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
xcigamesdd.com/wp-content/uploads/2022/01/logoxci.png
200 OK 10 kB URL HTTP/2 xcigamesdd.com/wp-content/uploads/2022/01/logoxci.png
IP
File type PNG image data, 334 x 58, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b646576d6afbe79ad073d2ff3f945b4
a98a2981b600bc08a7e3381696ef999f5ce4c651
82f3f21007e3ae451a7b0183f02388891d264e2da939050aad86a3a08464e37d
GET /wp-content/uploads/2022/01/logoxci.png HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Mon, 13 Feb 2023 15:46:13 GMT
content-type: image/png
last-modified: Sat, 29 Jan 2022 20:52:16 GMT
accept-ranges: bytes
content-length: 10423
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash 97872df40d38edb36ecc2056f0459a43
db01bdb48a765269f5efae12d06dbf6312bfaac3
b3b722f3bdfdf040acde12dc22e4432a35c65115d58356a73b0cde872e2e20ef
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 13 Oct 2022 18:36:58 GMT
Expires: Thu, 20 Oct 2022 18:36:57 GMT
Etag: "db01bdb48a765269f5efae12d06dbf6312bfaac3"
Cache-Control: max-age=355241,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 0
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75b1ed1be9251bfe-OSL
xcigamesdd.com/wp-content/themes/orbital/assets/fonts/fontawesome-webfont.woff
200 OK 98 kB URL HTTP/1.1 xcigamesdd.com/wp-content/themes/orbital/assets/fonts/fontawesome-webfont.woff
IP
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
GET /wp-content/themes/orbital/assets/fonts/fontawesome-webfont.woff HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://xcigamesdd.com/wp-content/themes/orbital/assets/css/main.css?ver=6.0.2
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=10368000
expires: Mon, 13 Feb 2023 15:46:13 GMT
content-type: font/woff
last-modified: Sat, 29 Jan 2022 15:58:55 GMT
accept-ranges: bytes
content-length: 98024
date: Sun, 16 Oct 2022 15:46:13 GMT
vary: Accept-Encoding
ocsp.digicert.com/
200 OK 471 B IP
Hash cfc92c8f6ee7599505d969732542ac42
7f4804d49c8ccd76ccffa6b72d41b1df611eb090
406c057a8392b9fa0ab09efa8b3222a58ec5fc17fa73f55a1f093e3d1092b0e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3943
Cache-Control: max-age=149175
Content-Type: application/ocsp-response
Date: Sun, 16 Oct 2022 15:46:15 GMT
Etag: "634bbb97-1d7"
Expires: Tue, 18 Oct 2022 09:12:30 GMT
Last-Modified: Sun, 16 Oct 2022 08:06:47 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d982a03e2ee47795747c5961150439ab
3c71d5a02cd96c5d8b95c8347eca0aff1c9c565d
a4603d0462b0fab7097c35cd353e9a5d2176c9cb897574c8e66b871d1a313430
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4603D0462B0FAB7097C35CD353E9A5D2176C9CB897574C8E66B871D1A313430"
Last-Modified: Sun, 16 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9657
Expires: Sun, 16 Oct 2022 18:27:12 GMT
Date: Sun, 16 Oct 2022 15:46:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bf341d72c7ec8bf9b4263c736772291
bf68228cbba5a9d5a8fb907642e1dbfb7e80a561
af9ade3560e7c67999f69fd90c269c94ff9d78e3cad372190a4b87a17df75e08
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AF9ADE3560E7C67999F69FD90C269C94FF9D78E3CAD372190A4B87A17DF75E08"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14421
Expires: Sun, 16 Oct 2022 19:46:36 GMT
Date: Sun, 16 Oct 2022 15:46:15 GMT
Connection: keep-alive
arsnivyr.com/42/38?z=5382937
200 OK 0 B URL HTTP/2 arsnivyr.com/42/38?z=5382937
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /42/38?z=5382937 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 6e9837a740247264ab934ad86419af43
access-control-expose-headers: X-Sc
x-sc: txEnP9w3-Mj4nzxbY6h9_Zx_Jg62JsQoCJjlcGoXDXaXETdVI4YFKNwU4DYliYs6vkzPBNs3dWue6bTMwl4XTiQ_fqw=
set-cookie: scm=1; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
OAID=60c3201cf5ef4d0caeeb185590e9442f; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1ZT1/jcVd/kyiS/kFyQs/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4rXipuglOe4JdsexkPlyrClH0h4=
www.highperformancedisplayformat.com/a91295b86ab6fe2c5666ef59da3743bf/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/a91295b86ab6fe2c5666ef59da3743bf/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26947), with no line terminators
Hash 24a8d0070374d410f3e425a58a517891
f580efd2b4f8f174364c8d24c5a9fed3e4cfd2ed
3502c6af27058ffc9102b53e6c671ea1c0b0c85d79ffd6cfa24f691c87120e89
Analyzer Verdict Alert quad9 Sinkholed
GET /a91295b86ab6fe2c5666ef59da3743bf/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 206a784c200969e92906f2f02f76ad4e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8ceb6907e82e85fb8def6059388c6a5b
35baf6e386c6760b175fe9e2f1ccf94aa23252b7
29409c4b3a8e023a8c96dd6b87348a1523b2bcee1cd01db6cfd11fd9050d5af5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 13 Oct 2022 18:25:21 GMT
Expires: Thu, 20 Oct 2022 18:25:20 GMT
Etag: "35baf6e386c6760b175fe9e2f1ccf94aa23252b7"
Cache-Control: max-age=354544,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75b1ed1e7ea6b521-OSL
my.rtmark.net/gid.js?userId=02aecf5ebc234aaeb2b58c36f5876e28
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=02aecf5ebc234aaeb2b58c36f5876e28
IP
File type JSON data\012- , ASCII text
Hash ef39b8f5acd626d19c585b370ba08522
9906ffffd8e67dd8f0db0a879ab21a6a4e82b6f7
98a2bb52112c5f685db4b01b880d865cda0897a6fbc2f7ea0245d86966ee95d0
GET /gid.js?userId=02aecf5ebc234aaeb2b58c36f5876e28 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
arsnivyr.com/9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28
204 No Content 0 B URL HTTP/2 arsnivyr.com/9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
ardslediana.com/?rb=VAbdV2p1cMbwdI85NdKE27pd-5yvVoF1psYzMOEBarDxc3k8ZdXps87vbjwvsHNC0Vne89cDS22rp57FlJxxL0Wk-SU1JGmusltQ_ycmFciXaK6y3XglIfye8DdbEUt5SewyUHePM8FSzfLMw2Ad7Pn6aCKu283JuRnDK-By-YDYeD-dMU4t6Jqhu-50mDKsUGOYeI_K1ol4yew6bBF0yE69QyQ%3D&request_ab2=0&zoneid=5260642&js_build=iclick-v1.436.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.436.1&bs=1137ef97-b4dc-4f3b-8904-c8fc4d82807e&userId=02aecf5ebc234aaeb2b58c36f5876e28&m=link
200 OK 1.7 kB URL HTTP/1.1 ardslediana.com/?rb=VAbdV2p1cMbwdI85NdKE27pd-5yvVoF1psYzMOEBarDxc3k8ZdXps87vbjwvsHNC0Vne89cDS22rp57FlJxxL0Wk-SU1JGmusltQ_ycmFciXaK6y3XglIfye8DdbEUt5SewyUHePM8FSzfLMw2Ad7Pn6aCKu283JuRnDK-By-YDYeD-dMU4t6Jqhu-50mDKsUGOYeI_K1ol4yew6bBF0yE69QyQ%3D&request_ab2=0&zoneid=5260642&js_build=iclick-v1.436.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.436.1&bs=1137ef97-b4dc-4f3b-8904-c8fc4d82807e&userId=02aecf5ebc234aaeb2b58c36f5876e28&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2175), with no line terminators
Hash df0a2ea250e021d82fbba8e4fe54e0a3
86b7fbbb7746ce7a4cef456c4d3e6d429e892add
def96031a0493b0fce3966e7d3ae3729a5d9468c97022c5618e13065250b061a
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=VAbdV2p1cMbwdI85NdKE27pd-5yvVoF1psYzMOEBarDxc3k8ZdXps87vbjwvsHNC0Vne89cDS22rp57FlJxxL0Wk-SU1JGmusltQ_ycmFciXaK6y3XglIfye8DdbEUt5SewyUHePM8FSzfLMw2Ad7Pn6aCKu283JuRnDK-By-YDYeD-dMU4t6Jqhu-50mDKsUGOYeI_K1ol4yew6bBF0yE69QyQ%3D&request_ab2=0&zoneid=5260642&js_build=iclick-v1.436.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.436.1&bs=1137ef97-b4dc-4f3b-8904-c8fc4d82807e&userId=02aecf5ebc234aaeb2b58c36f5876e28&m=link HTTP/1.1
Host: ardslediana.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 3391b5789916703a9c47247ae7e16b61
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:15 GMT; path=/
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:15 GMT; path=/
syncedCookie=true; expires=Sun, 23 Oct 2022 15:46:15 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
www.highperformancedisplayformat.com/e0545ea4e9fad86bbc397bc0cf40db8c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/e0545ea4e9fad86bbc397bc0cf40db8c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26971), with no line terminators
Hash c7b961551cb63ddf28eafec8f95ea384
e6970c8f4b412d761f41fbbaaacf70f83a0a5262
7c25e396beca3b61e34c4bda6307c61669113867a869122a2de7c4753a659c92
Analyzer Verdict Alert quad9 Sinkholed
GET /e0545ea4e9fad86bbc397bc0cf40db8c/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3fc985cb6232eab65d7abf96e1a2954a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f0413efff3fc4435819eea0892565002
68f2cbf9d99cbc2f3500c911fe2906ea03a6d72f
f5ebdb13ab4ad27844b4ad00d4bb79c9238bd02937bdab5dc83d0802d956895f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166689
Date: Sun, 16 Oct 2022 15:46:15 GMT
Etag: "634bf982-1d7"
Expires: Tue, 18 Oct 2022 14:04:24 GMT
Last-Modified: Sun, 16 Oct 2022 12:30:58 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X9DIkx5hsSSviV47zEvmxEq3CbIzeu7uqdcwys9ZFsJP-ts9b1egxw==
Age: 5606
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 78dd2227347e23e85d10c70f1dc07c1a
be6f662dfe908dccffa4c038a951e1ad8c1e8bd4
296ee36fe227dd8b824d000186705c14fa30a3cc9fac2154adca8a846aae84de
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 15:46:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
set-cookie: uid_id2=314e687e-0573-4a28-9259-828e8f3b4167:2:1; expires=Wed, 13 Oct 2032 15:46:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
arsnivyr.com/27/3a63a2a43bbf0a0bb029696534151382
200 OK 123 kB URL HTTP/2 arsnivyr.com/27/3a63a2a43bbf0a0bb029696534151382
IP
Size 123 kB (122923 bytes)
Hash fd5826ad3bef00598c6b077337507459
205b3cdc872ba550c13435c5da185be34440a2b6
9d19973656eb4e3cb22200b1e93e7d81391ada0835606e428c1e57576dffef22
Analyzer Verdict Alert quad9 Sinkholed
GET /27/3a63a2a43bbf0a0bb029696534151382 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
cache-control: max-age:290304000, public
last-modified: Thu, 13 Oct 2022 05:14:04 GMT
expires: Thu, 12 Nov 2082 05:14:04 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 6dc6c4647537460f3d68db338499af5e
7b2a4e9e04cbec26fb4943534c487a542022f9c4
aa731d0c21977a0748cf769632a01ffe05ce44090caca5e04e7c7de849619d02
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 15:46:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
set-cookie: uid_id2=136b2b81-36cd-41a0-9036-a698a79b149d:1:1; expires=Wed, 13 Oct 2032 15:46:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.highperformancedisplayformat.com/31224abe9de8da03816b59f2882025e3/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/31224abe9de8da03816b59f2882025e3/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 1aacbbb8e92081c9e574dc9afa46431d
1434fa722a7364b7df682d9a054e2a49de38c07a
82d48adbd11a8c1b2a7bb48f0a9ba77cc91cf718a3b46f246d09b802f6b958fa
Analyzer Verdict Alert quad9 Sinkholed
GET /31224abe9de8da03816b59f2882025e3/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 16 Oct 2022 15:46:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3507c5ff073f7f82abce07b3bce5600d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-LTBNRSB0H2>m=2oeaa0&_p=987415573&gdid=dZTNiMT&cid=1059727917.1665935179&ul=en-us&sr=1280x1024&_s=1&sid=1665935178&sct=1&seg=0&dl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&dt=Super%20Mario%20Odyssey%20XCI%20NSP%20NSZ%20Download%20%7C%20SwitchXCI&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LTBNRSB0H2>m=2oeaa0&_p=987415573&gdid=dZTNiMT&cid=1059727917.1665935179&ul=en-us&sr=1280x1024&_s=1&sid=1665935178&sct=1&seg=0&dl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&dt=Super%20Mario%20Odyssey%20XCI%20NSP%20NSZ%20Download%20%7C%20SwitchXCI&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LTBNRSB0H2>m=2oeaa0&_p=987415573&gdid=dZTNiMT&cid=1059727917.1665935179&ul=en-us&sr=1280x1024&_s=1&sid=1665935178&sct=1&seg=0&dl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&dt=Super%20Mario%20Odyssey%20XCI%20NSP%20NSZ%20Download%20%7C%20SwitchXCI&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://xcigamesdd.com
date: Sun, 16 Oct 2022 15:46:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193
204 No Content 0 B URL HTTP/2 arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-sc
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193
200 OK 0 B URL HTTP/2 arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=193 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Sc: wijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE=
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: scm=1; OAID=02aecf5ebc234aaeb2b58c36f5876e28; oaidts=1665935175
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 50b5e9a8377d50b4adc931a0c981e689
access-control-expose-headers: X-Sc
x-sc:
set-cookie: OAID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:16 GMT; secure; SameSite=None
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cd24c9d4978f0b7bc28c53b89aa3d32
98b7ba0e37bded45f228cf1caa22de8db5b22570
ab2bbcda913e50c119157d40e076d26e1b825a5c21962aa533ec260c20be7c39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB2BBCDA913E50C119157D40E076D26E1B825A5C21962AA533EC260C20BE7C39"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17521
Expires: Sun, 16 Oct 2022 20:38:17 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
interstitial-07.com/contents/s/d6/8b/74/1399c81d3d40323a9283c84de7/01611244700873.jpeg
200 OK 32 kB URL HTTP/2 interstitial-07.com/contents/s/d6/8b/74/1399c81d3d40323a9283c84de7/01611244700873.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Hash d68b741399c81d3d40323a9283c84de7
5a9fed7a055d2cea7b377d097d8a1a4467b84b6c
eafbd070e242221ff6a9f212d233c299858f92a8b9f2718bad4c99986c5f8b64
GET /contents/s/d6/8b/74/1399c81d3d40323a9283c84de7/01611244700873.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=cl3tvCFV5t9QRqB&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Farsnivyr.com%2F12%3Frnd%3D1380739040%26z%3D5382937%26b%3D15242990%26c%3D6199011%26var%3D%26d%3Dhttps%253A%252F%252Finvestiremercato.it%252F%253Fos%253D%257Bos%257D%2526banner%253D%257Bbannerid%257D%2526country%253D%257Bcountry%257D%2526zoneid%253D%257Bzoneid%257D%2526zone_type%253D%257Bzone_type%257D%2526cost%253D%257Bcost%257D%2526clickid%253D%2524%257BSUBID%257D%26cln%3D1%26btp%3D7%26rb%3DoQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q%3D%3D%26bag%3DsEGAJXp1lLMCUu3u712rZNm7OPdtTHTp%26ruid%3Dc464a7e3-65cc-4edc-8a02-665b7093ae47%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttp%253A%252F%252Fxcigamesdd.com%252Fsuper-mario-odyssey-v327%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D939%26wfc%3D1%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0%26X-Sc%3Dwijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/jpeg
content-length: 31939
last-modified: Wed, 28 Sep 2022 19:39:16 GMT
etag: "6334a2e4-7cc3"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bce837e0b75ac3f7bf6bb2d0f587dd16
ca38cddc20edbfab7d1bd4a808d7a9aa1b386dc8
1ad0fabbcf6d56c8ecb6cb87f46881b59c3b92b2d0391cc45cc531033e4b17bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1AD0FABBCF6D56C8ECB6CB87F46881B59C3B92B2D0391CC45CC531033E4B17BC"
Last-Modified: Sat, 15 Oct 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17479
Expires: Sun, 16 Oct 2022 20:37:35 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
interstitial-07.com/contents/s/2d/40/af/8e20ab58355a466d1640c54da4/01291161879152.jpeg
200 OK 68 kB URL HTTP/2 interstitial-07.com/contents/s/2d/40/af/8e20ab58355a466d1640c54da4/01291161879152.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x600, components 3\012- data
Hash 2d40af8e20ab58355a466d1640c54da4
9994d1306d1c1cb46019627443b71f3fc103af36
6881f7ede3f2844b47113ea9ec10bac093b0d1d58773a494600a15414e504f45
GET /contents/s/2d/40/af/8e20ab58355a466d1640c54da4/01291161879152.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=cl3tvCFV5t9QRqB&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Farsnivyr.com%2F12%3Frnd%3D1380739040%26z%3D5382937%26b%3D15242990%26c%3D6199011%26var%3D%26d%3Dhttps%253A%252F%252Finvestiremercato.it%252F%253Fos%253D%257Bos%257D%2526banner%253D%257Bbannerid%257D%2526country%253D%257Bcountry%257D%2526zoneid%253D%257Bzoneid%257D%2526zone_type%253D%257Bzone_type%257D%2526cost%253D%257Bcost%257D%2526clickid%253D%2524%257BSUBID%257D%26cln%3D1%26btp%3D7%26rb%3DoQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q%3D%3D%26bag%3DsEGAJXp1lLMCUu3u712rZNm7OPdtTHTp%26ruid%3Dc464a7e3-65cc-4edc-8a02-665b7093ae47%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttp%253A%252F%252Fxcigamesdd.com%252Fsuper-mario-odyssey-v327%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D939%26wfc%3D1%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0%26X-Sc%3Dwijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/jpeg
content-length: 67696
last-modified: Wed, 28 Sep 2022 19:39:12 GMT
etag: "6334a2e0-10870"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2873b7d4f22d9879ff578ee4e7e372f4
39333db169b49843eb3ae3c3b0e717b9b816af80
edad97e421f4c5ea345a374fa70cdf6cdb2ba34668ed7170e42df676511d103d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDAD97E421F4C5EA345A374FA70CDF6CDB2BA34668ED7170E42DF676511D103D"
Last-Modified: Sat, 15 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11120
Expires: Sun, 16 Oct 2022 18:51:36 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
unphionetor.com/fv.js?t=72747&cb=1269169939
200 OK 2.2 kB URL HTTP/2 unphionetor.com/fv.js?t=72747&cb=1269169939
IP
File type ASCII text, with very long lines (5213), with no line terminators
Hash 0254fb1dad74628b7ad0f97d304fac92
35f7af13a08eb87023ec7df4d3c35c21b2cde79d
47fb6ce428ca80ea69b772e4f66e4e5c622a4005db601746033d04511bd27536
Analyzer Verdict Alert quad9 Sinkholed
GET /fv.js?t=72747&cb=1269169939 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 7c0c689de47eb1c1d3c432c1df87fcc2
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30019baedadfbde657d600581a732bff
5cbe07fbfbb1767ac26f3c2549f7c3347051aa7b
543030e37469ad32104bb114e91b1b946add60d0fd1e59799dad52aff1b4ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "543030E37469AD32104BB114E91B1B946ADD60D0FD1E59799DAD52AFF1B4AE7F"
Last-Modified: Fri, 14 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Sun, 16 Oct 2022 16:25:25 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b183fddf1f6b1bf92543dbf8714dd945
f0f1021a0fc5f4f9c919a1ff79b83302b187368b
b4b50dc8c4b812085a9ad867d8d51433abdb6cd1f07c8c6875104e2c3551938c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4B50DC8C4B812085A9AD867D8D51433ABDB6CD1F07C8C6875104E2C3551938C"
Last-Modified: Fri, 14 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10791
Expires: Sun, 16 Oct 2022 18:46:07 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
204 No Content 0 B URL HTTP/2 arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-sc
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
200 OK 0 B URL HTTP/2 arsnivyr.com/11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=3661190926&z=5382937&b=15242990&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q==&ruid=c464a7e3-65cc-4edc-8a02-665b7093ae47&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Sc: wijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE=
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: scm=1; OAID=02aecf5ebc234aaeb2b58c36f5876e28; oaidts=1665935175
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 6d8d4c7784f66c35ee0c02bad5d92fb1
access-control-expose-headers: X-Sc
x-sc:
set-cookie: OAID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:16 GMT; secure; SameSite=None
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:16 GMT; secure; SameSite=None
oaidvc=1; expires=Mon, 16 Oct 2023 15:46:16 GMT; secure; SameSite=None
CNT=1_v1_7pboAAEAAABRSwAA; expires=Sun, 16 Oct 2022 16:46:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 7de89039a23ff84f5f333d8ab6aab936
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14195
Expires: Sun, 16 Oct 2022 19:42:51 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
notifyoutspoken.com/watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 notifyoutspoken.com/watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1 HTTP/1.1
Host: notifyoutspoken.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Location: https://notifyoutspoken.com/watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=575fef835d71c0dee86c0d5d79c5e6e5391a0a0b71ca589db9ccfdb59473d2885dd042fbbb0740b8ad83926b8d68446404a83f719752ffe6a3e35e4d6fcdddbe38c1b4c1373b20094949d311a83f1a997fc4d93672cd395bac5e380595acfb5724&pst=1665935236&rmtc=t
Set-Cookie: u_pl=17632624; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.1u6QAfPwyIg69YNZr-RHYjCZ-8OttwAY4c06JvwP9I4; expires=Sun, 16 Oct 2022 15:47:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4df1f58dff9a60d835ceb15b95d134ad
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14195
Expires: Sun, 16 Oct 2022 19:42:51 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14195
Expires: Sun, 16 Oct 2022 19:42:51 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 467c98217b3c90dedabafc249207b8eb
8a0756b2c6003aaaba58cc75be784e8e283feb45
82b3ac154fd4347d2a7827d48ff7f0ccc8c0abe562cb6796a52b02e7cc9b6467
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82B3AC154FD4347D2A7827D48FF7F0CCC8C0ABE562CB6796A52B02E7CC9B6467"
Last-Modified: Sat, 15 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14195
Expires: Sun, 16 Oct 2022 19:42:51 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df5f38c3dc43ccc382d0274bffb6b350
9a305072cce8bb61ca3753bb98b999695fb4706e
20ff21892e65787fecbadca0f59c05e54dee3a1359271839dab0ee5c9e796ab0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F89b2ee08-a53a-4763-aca2-fe23fd25f3d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6367
x-amzn-requestid: 485c3cf9-d305-4540-8eef-8304d1103ccc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5EHbOoAMFWsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a0-2ac206d826bf23193740e74c;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j4GFPRLOwyEGJVrC4uk01vi858DLWzDtUNZkfmbJ1ybrMV4xEdOIVg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:50:24 GMT
age: 64552
etag: "9a305072cce8bb61ca3753bb98b999695fb4706e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sheschemetraitor.com/watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 sheschemetraitor.com/watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1 HTTP/1.1
Host: sheschemetraitor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Location: https://sheschemetraitor.com/watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=46689825b684e07555a9b67bff22cdf085dbca8fa05bd71bdaa18c9deea14e311bf6403593e34cb91be58c528a4e2e852c0ebc1283f2996dc37de33a32363ef3a9dd154490e3abc55ec0d0dfbcdcd57652e9b032809a942246eae894dcfccfd4&pst=1665935236&rmtc=t
Set-Cookie: u_pl=17632612; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzYzMjYxMiwiayI6IjMxMjI0YWJlOWRlOGRhMDM4MTZiNTlmMjg4MjAyNWUzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTQ3MjUzLCJwaWQiOjE1ODEwNCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjozMiwicHQiOjQsInBrIjoieTExNXQwMTN3IiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwOi8veGNpZ2FtZXNkZC5jb20vc3VwZXItbWFyaW8tb2R5c3NleS12MzI3LyJ9fQ.mpQNzq3okuFfPQ88sy3JTtis2V3ABdZ9YvoC_PYs2sw; expires=Sun, 16 Oct 2022 15:47:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 46ebbb00e7deed1a7677c2efb06a24bd
Strict-Transport-Security: max-age=0; includeSubdomains
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e20daa74ab04b1b9859672acfc070f7e
d291947f161c928e6c6682a05835478b5f0cffc5
ebbe051930f46dd25de2a4c5795f3bdddf1513c0657cdc986c48f3dfdc90f575
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb25d7cce-c352-4b25-a8c5-aa8493d99e4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9260
x-amzn-requestid: dfd8deb0-fc73-4321-b024-330b2a3d1759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aENyFH9RoAMF24w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b29a6-0aaf75c43b51d5775bc48a95;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:44:06 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YVZ4EN-w7lmXTXKTy_A-9P0TW0zAqSa7j5_G2M1XnS-j3EfJSEFplw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:58:49 GMT
age: 64047
etag: "d291947f161c928e6c6682a05835478b5f0cffc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd94762992136ed2f4d24dd34a745154
2050cee63f8005c5d9ac1a817730ada51b323f34
4548836d8846da958f477e1df952f6da9b9640e204804a7c76194d3e061b90a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdbc5b51-a9c2-4f99-ad40-8ab061924326.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7082
x-amzn-requestid: 5e98988f-faad-4e52-a49f-28d5a77b15d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL46HFloAMFSag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b269f-6759e36c79241479181c1d05;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p2Ytir5IhFSnRKz3OJ3J6_SieMyoFAAysH8-jBf_Bh_xfKEDRGy18g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:36:56 GMT
age: 65360
etag: "2050cee63f8005c5d9ac1a817730ada51b323f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6432c2bf0bab32f918d931dd98a6e1e4
bba4f37b146e5aea2b6490f8f7da63fa61ffc849
bde0d98cb1dcd70f22cd2aee5860eb0cd824d1bb12ab18245ab8eed06a79cf1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cebbc75-2448-4faf-839b-c39ac6e47b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7337
x-amzn-requestid: 43a16c4d-c5b9-4d01-8ba4-e811b09e96b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqEwVoAMFe5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-121eda8b7a73518849342e7a;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HUtvwwtoxo38w1ZiKkBZJL0dL3G7aCdUNzvcUhJ7CZ_Taj_tMyfjAQ==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 05:03:21 GMT
age: 38575
etag: "bba4f37b146e5aea2b6490f8f7da63fa61ffc849"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c75eb52-0ce4-4b74-92b3-a3670b609024.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c75eb52-0ce4-4b74-92b3-a3670b609024.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0dee97568c5306e8334fcc9dce195ccb
194a7c40cdfae31844fa711d53142ea98f007a92
bf4e94f2062baf118da68b2fe3f5f38e20f21fe85900cdc69509119e757707c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c75eb52-0ce4-4b74-92b3-a3670b609024.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8579
x-amzn-requestid: c473888c-7989-4b4d-a5e7-f5f3149e145c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5NEfdoAMFaWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a1-4a1d1eb16fc64022768f622d;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: icdYFhmC1BY6tDrbYts7bOdjWH55Fkl-CkRdRhqKEuF4MJNFdLA-sQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 22:24:22 GMT
age: 62514
etag: "194a7c40cdfae31844fa711d53142ea98f007a92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54edb9ab897821172fc13756df376ee7
2010f9656d87e6f5220f131628c537720c3673e1
6694c1be0adf97fa77d1bfa29337d9e609b729a58d42e141e9bb55ed6367b1d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13261
x-amzn-requestid: dd760e09-701e-4956-9723-386edc97c694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z0fH6FzIoAMFzJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344deff-197cf4f048e146af5654d0bd;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 03:11:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GqrnIWT2tXfLFsliOhOKbPHcYY56gN8Ig4Nlbx9vb6vjSkD66XDvCw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 16 Oct 2022 07:36:42 GMT
age: 29374
etag: "2010f9656d87e6f5220f131628c537720c3673e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
notifyoutspoken.com/watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=575fef835d71c0dee86c0d5d79c5e6e5391a0a0b71ca589db9ccfdb59473d2885dd042fbbb0740b8ad83926b8d68446404a83f719752ffe6a3e35e4d6fcdddbe38c1b4c1373b20094949d311a83f1a997fc4d93672cd395bac5e380595acfb5724&pst=1665935236&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 notifyoutspoken.com/watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=575fef835d71c0dee86c0d5d79c5e6e5391a0a0b71ca589db9ccfdb59473d2885dd042fbbb0740b8ad83926b8d68446404a83f719752ffe6a3e35e4d6fcdddbe38c1b4c1373b20094949d311a83f1a997fc4d93672cd395bac5e380595acfb5724&pst=1665935236&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2605)
Hash 4046928d9692aedbc83cddcee3b1c641
98557b8c8a57b7999395bd7b66cf58d77248e1f9
0fbbe782622074c193f048ef149b6053ea3daccaf3438e1255eb1b9b1f765d5d
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.279094245858.js?key=a91295b86ab6fe2c5666ef59da3743bf&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=575fef835d71c0dee86c0d5d79c5e6e5391a0a0b71ca589db9ccfdb59473d2885dd042fbbb0740b8ad83926b8d68446404a83f719752ffe6a3e35e4d6fcdddbe38c1b4c1373b20094949d311a83f1a997fc4d93672cd395bac5e380595acfb5724&pst=1665935236&rmtc=t HTTP/1.1
Host: notifyoutspoken.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Referer: http://xcigamesdd.com/
Connection: keep-alive
Cookie: u_pl=17632624; ain=eyJhbGciOiJIUzI1NiJ9.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.1u6QAfPwyIg69YNZr-RHYjCZ-8OttwAY4c06JvwP9I4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=101454b2-d436-4c85-824b-86525385e21e:2:1; expires=Sun, 23 Oct 2022 15:46:16 GMT; secure; SameSite=None
iprc0ca81e1adfbc6b59f465de90421033d5=3569806; expires=Sun, 16 Oct 2022 19:46:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b11b6cf35be3ba857ec8c3e9a934a62c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51888e524274dd5a9f545aaf74dc773d
f92d558999c2ac533d872c5a57ac65465456f3f1
cb956fb32fc9ad87e0ea3e114e0d0a68bf3eb8b0015a0125349ad5e63d6b47ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB956FB32FC9AD87E0EA3E114E0D0A68BF3EB8B0015A0125349AD5E63D6B47EF"
Last-Modified: Fri, 14 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6461
Expires: Sun, 16 Oct 2022 17:33:57 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
sheschemetraitor.com/watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=46689825b684e07555a9b67bff22cdf085dbca8fa05bd71bdaa18c9deea14e311bf6403593e34cb91be58c528a4e2e852c0ebc1283f2996dc37de33a32363ef3a9dd154490e3abc55ec0d0dfbcdcd57652e9b032809a942246eae894dcfccfd4&pst=1665935236&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 sheschemetraitor.com/watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=46689825b684e07555a9b67bff22cdf085dbca8fa05bd71bdaa18c9deea14e311bf6403593e34cb91be58c528a4e2e852c0ebc1283f2996dc37de33a32363ef3a9dd154490e3abc55ec0d0dfbcdcd57652e9b032809a942246eae894dcfccfd4&pst=1665935236&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2627)
Hash fa704856913a5aba322439101c1616c8
89c8f92276ed3342c607809d69f06a9257a0ba8b
c1303e3119579b23ec7b7f913ab6ed84da0942c0b76bc6f556feb19dc8909e21
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1402075173845.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=101454b2-d436-4c85-824b-86525385e21e%3A2%3A1&shu=46689825b684e07555a9b67bff22cdf085dbca8fa05bd71bdaa18c9deea14e311bf6403593e34cb91be58c528a4e2e852c0ebc1283f2996dc37de33a32363ef3a9dd154490e3abc55ec0d0dfbcdcd57652e9b032809a942246eae894dcfccfd4&pst=1665935236&rmtc=t HTTP/1.1
Host: sheschemetraitor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Referer: http://xcigamesdd.com/
Connection: keep-alive
Cookie: u_pl=17632612; ain=eyJhbGciOiJIUzI1NiJ9.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.mpQNzq3okuFfPQ88sy3JTtis2V3ABdZ9YvoC_PYs2sw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=101454b2-d436-4c85-824b-86525385e21e:2:1; expires=Sun, 23 Oct 2022 15:46:16 GMT; secure; SameSite=None
iprc3027e1c55807b6b40d38020a18541f58=3570421; expires=Sun, 16 Oct 2022 19:46:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
pdhtkv32=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs32=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 117c1703bd3fd0035aed5cb03d06a54e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
diminutioneconomy.com/ntv.json?key=849ad080ebdaa9ca9dd84f2d9f8c2306&vstc=4
200 OK 16 kB URL HTTP/1.1 diminutioneconomy.com/ntv.json?key=849ad080ebdaa9ca9dd84f2d9f8c2306&vstc=4
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (16381), with no line terminators
Hash d1e5b83fedc59a3ec5dbea79194c5eb7
b98bf2ef77a6687b20921767e38ff82e9e9434a3
cecd19766af6878f9e739925ad70b4a8513c0ac2656136e11a6ed5e4cc50bf63
GET /ntv.json?key=849ad080ebdaa9ca9dd84f2d9f8c2306&vstc=4 HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: application/json
Content-Length: 16381
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17560728; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
pdhtkv49=true; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
uncs49=1; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
nlec849ad080ebdaa9ca9dd84f2d9f8c2306=[2229213,2229214,2106764,2229215]; expires=Sun, 16 Oct 2022 15:46:21 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c0cc6964bed5dee73b00e974f060f57
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash abfe30f7c4f05c6836c43c73f69a4aa4
3c508047c302b22f442b3887a06271133ce44325
0b3262bd288b2a5bf5ffd8e81b287007e83b3ab77979ee2203caa043385fe03e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B3262BD288B2A5BF5FFD8E81B287007E83B3AB77979EE2203CAA043385FE03E"
Last-Modified: Sat, 15 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13325
Expires: Sun, 16 Oct 2022 19:28:21 GMT
Date: Sun, 16 Oct 2022 15:46:16 GMT
Connection: keep-alive
massacreintentionalmemorize.com/watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 massacreintentionalmemorize.com/watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1 HTTP/1.1
Host: massacreintentionalmemorize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Location: https://massacreintentionalmemorize.com/watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1&shu=d68198c1fc6af5edd50ee10c5512bc1e1536ebfb487ff6379ab8b69a37555732b38d03267256c9bd4dcb6ab9c9d6cb93c8db9c290ccfa30a5731b8b409feb0bc13114732a62453a5ea8f0f66f427fa92d830a61484fc7e15cf8ca6e5d61e&pst=1665935236&rmtc=t
Set-Cookie: u_pl=17596898; expires=Mon, 17 Oct 2022 15:46:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.Y4odCyVk7OyhYr1gabzqlvHWOBP3cF3MwBStp4RTvAE; expires=Sun, 16 Oct 2022 15:47:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 02ff209c51eb23dd8c8cdb0b5d748ead
Strict-Transport-Security: max-age=0; includeSubdomains
diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRidta9ApAEUCiSQTkj8Sei8u3e%2BH1JEGGOwMHFIQNCh2Zm58%2BDZndXMzu3ZlSECpaC4giJQrd%2FZsQhWBA0dFjpHQsii8HUuYmpqEKJEe1gcfNLu9755r3jfz2e77pz4cPRs%2BW29LZWiC4s1v%2FriB0FwpbomEzeoDtrND5uNK1XTf6XTrPkvVd8QbFMvhH7g%2B4EfVFekEV09WChJyPSwE9Q6fq0R1oLFBgbm%2F7V1Hiz1wPvn5AlIPqk88C5DsjGS%2BNtlYTcznb78euwUzbRBnx%2B8l2wmOk8Qz2DXeOgmBxdqaHu6cgSd7E%2FtQvf%2FFUZyQryfjhAlBxcmEfX3pj4jBZEg4peQ98cQagxJx2D6FiQ%2FJQDjuLaOJL57TZucbv3D0pKdkMqfv0PmE1J5eBlJfH9JyUH1plYukzqxGHQLyMEYsjdG6o6Rbc9B5sdg2SeQnCCJC0heTHuWcgzZHUOJIaj14MpPenBdDy71EPOzKguCoOVzRv12h7E6b4moyf2AtroBDfxmG46VtobI0iGYGoKZHaRmB5tyCON%2BhN0oYLkHm02I984O%2BrxALghyS5BTglwS5BlB3i%2F2ubKhLe5yZV0UXOTwIteLkc56u3RfZz2RkN30nDxezsO79McdbIqzarvRodxv%2ByLilHYY7XDebnRD3um2WVj3m7CygLRz01a35YQ8871DKidkTt5BRI9h1TGYfBLUBaD5qBX6oBujRtvHdnJ%2FwGSPxsJyXmM6BtcF0qyCbMvbVefkqelmnp1%2FCMFOrt57%2BvCR4PnfwEyB1BT4SD4g6Knboxs6J3s3dG7Jd%2BtpJmO5Tcut3cxoJubvvSW2cm346rIdfv0qK4kSHr4rbLZGEy6TniXfLEnOhVnRhgnyw6p9X0TXnd1YciZx6dr111ZW49QIa6VOxqDydP0vMDkhlY%2BPpuf42C%2BfQpoxjCsQuxNyEZD6GCzdgU1n7q2eh1EzTZR6yF0xMmE0e1SSQIlZTaMC9j91NMO79jZ6JgTNbk2vsG8K9FUBqoaw7tFRlpqTqz9%2FWcZXiFRlFClT2YuUUV9MR1v%2Bziek%2BtznJfoVVp5VW%2FW6T5udxaDVoqIVNcJ2txlwSsNGM2w2aR2ZnbC1F978GwAA%2F%2F8BAAD%2F%2Fwn5DhNoBAAA
200 OK 7 B URL HTTP/1.1 diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRidta9ApAEUCiSQTkj8Sei8u3e%2BH1JEGGOwMHFIQNCh2Zm58%2BDZndXMzu3ZlSECpaC4giJQrd%2FZsQhWBA0dFjpHQsii8HUuYmpqEKJEe1gcfNLu9755r3jfz2e77pz4cPRs%2BW29LZWiC4s1v%2FriB0FwpbomEzeoDtrND5uNK1XTf6XTrPkvVd8QbFMvhH7g%2B4EfVFekEV09WChJyPSwE9Q6fq0R1oLFBgbm%2F7V1Hiz1wPvn5AlIPqk88C5DsjGS%2BNtlYTcznb78euwUzbRBnx%2B8l2wmOk8Qz2DXeOgmBxdqaHu6cgSd7E%2FtQvf%2FFUZyQryfjhAlBxcmEfX3pj4jBZEg4peQ98cQagxJx2D6FiQ%2FJQDjuLaOJL57TZucbv3D0pKdkMqfv0PmE1J5eBlJfH9JyUH1plYukzqxGHQLyMEYsjdG6o6Rbc9B5sdg2SeQnCCJC0heTHuWcgzZHUOJIaj14MpPenBdDy71EPOzKguCoOVzRv12h7E6b4moyf2AtroBDfxmG46VtobI0iGYGoKZHaRmB5tyCON%2BhN0oYLkHm02I984O%2BrxALghyS5BTglwS5BlB3i%2F2ubKhLe5yZV0UXOTwIteLkc56u3RfZz2RkN30nDxezsO79McdbIqzarvRodxv%2ByLilHYY7XDebnRD3um2WVj3m7CygLRz01a35YQ8871DKidkTt5BRI9h1TGYfBLUBaD5qBX6oBujRtvHdnJ%2FwGSPxsJyXmM6BtcF0qyCbMvbVefkqelmnp1%2FCMFOrt57%2BvCR4PnfwEyB1BT4SD4g6Knboxs6J3s3dG7Jd%2BtpJmO5Tcut3cxoJubvvSW2cm346rIdfv0qK4kSHr4rbLZGEy6TniXfLEnOhVnRhgnyw6p9X0TXnd1YciZx6dr111ZW49QIa6VOxqDydP0vMDkhlY%2BPpuf42C%2BfQpoxjCsQuxNyEZD6GCzdgU1n7q2eh1EzTZR6yF0xMmE0e1SSQIlZTaMC9j91NMO79jZ6JgTNbk2vsG8K9FUBqoaw7tFRlpqTqz9%2FWcZXiFRlFClT2YuUUV9MR1v%2Bziek%2BtznJfoVVp5VW%2FW6T5udxaDVoqIVNcJ2txlwSsNGM2w2aR2ZnbC1F978GwAA%2F%2F8BAAD%2F%2Fwn5DhNoBAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRidta9ApAEUCiSQTkj8Sei8u3e%2BH1JEGGOwMHFIQNCh2Zm58%2BDZndXMzu3ZlSECpaC4giJQrd%2FZsQhWBA0dFjpHQsii8HUuYmpqEKJEe1gcfNLu9755r3jfz2e77pz4cPRs%2BW29LZWiC4s1v%2FriB0FwpbomEzeoDtrND5uNK1XTf6XTrPkvVd8QbFMvhH7g%2B4EfVFekEV09WChJyPSwE9Q6fq0R1oLFBgbm%2F7V1Hiz1wPvn5AlIPqk88C5DsjGS%2BNtlYTcznb78euwUzbRBnx%2B8l2wmOk8Qz2DXeOgmBxdqaHu6cgSd7E%2FtQvf%2FFUZyQryfjhAlBxcmEfX3pj4jBZEg4peQ98cQagxJx2D6FiQ%2FJQDjuLaOJL57TZucbv3D0pKdkMqfv0PmE1J5eBlJfH9JyUH1plYukzqxGHQLyMEYsjdG6o6Rbc9B5sdg2SeQnCCJC0heTHuWcgzZHUOJIaj14MpPenBdDy71EPOzKguCoOVzRv12h7E6b4moyf2AtroBDfxmG46VtobI0iGYGoKZHaRmB5tyCON%2BhN0oYLkHm02I984O%2BrxALghyS5BTglwS5BlB3i%2F2ubKhLe5yZV0UXOTwIteLkc56u3RfZz2RkN30nDxezsO79McdbIqzarvRodxv%2ByLilHYY7XDebnRD3um2WVj3m7CygLRz01a35YQ8871DKidkTt5BRI9h1TGYfBLUBaD5qBX6oBujRtvHdnJ%2FwGSPxsJyXmM6BtcF0qyCbMvbVefkqelmnp1%2FCMFOrt57%2BvCR4PnfwEyB1BT4SD4g6Knboxs6J3s3dG7Jd%2BtpJmO5Tcut3cxoJubvvSW2cm346rIdfv0qK4kSHr4rbLZGEy6TniXfLEnOhVnRhgnyw6p9X0TXnd1YciZx6dr111ZW49QIa6VOxqDydP0vMDkhlY%2BPpuf42C%2BfQpoxjCsQuxNyEZD6GCzdgU1n7q2eh1EzTZR6yF0xMmE0e1SSQIlZTaMC9j91NMO79jZ6JgTNbk2vsG8K9FUBqoaw7tFRlpqTqz9%2FWcZXiFRlFClT2YuUUV9MR1v%2Bziek%2BtznJfoVVp5VW%2FW6T5udxaDVoqIVNcJ2txlwSsNGM2w2aR2ZnbC1F978GwAA%2F%2F8BAAD%2F%2Fwn5DhNoBAAA HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: u_pl=17560728; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec849ad080ebdaa9ca9dd84f2d9f8c2306=[2229213,2229214,2106764,2229215]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b575d4da6183cbd7ce5bb03127c100d3
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
200 OK 144 kB URL HTTP/2 cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 144 kB (144379 bytes)
Hash 33c304429dc1a4408a96e6a74ffa2feb
c45fa8e65528d1bb2b46bf8a28af9eeaa1903d04
dbed482e5948ead5587d30a22306a5b611305f704de940bd22c76daf90e0a314
GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/png
content-length: 144379
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Tue, 18 Oct 2022 15:46:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg
200 OK 25 kB URL HTTP/2 cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, baseline, precision 8, 320x50, components 3\012- data
Hash d465d02b90e928dfd9d9846e102a9dac
22f7333777bec813bd9a7b870913a2b79b6d2fe4
e393d4f1c6b5d4973e157f0f10764b92037dc18239500f42b72bed8ecef462fd
GET /cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: image/jpeg
content-length: 24714
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 14:06:18 GMT
etag: "62e1465a-608a"
expires: Tue, 18 Oct 2022 15:46:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
massacreintentionalmemorize.com/watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1&shu=d68198c1fc6af5edd50ee10c5512bc1e1536ebfb487ff6379ab8b69a37555732b38d03267256c9bd4dcb6ab9c9d6cb93c8db9c290ccfa30a5731b8b409feb0bc13114732a62453a5ea8f0f66f427fa92d830a61484fc7e15cf8ca6e5d61e&pst=1665935236&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 massacreintentionalmemorize.com/watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1&shu=d68198c1fc6af5edd50ee10c5512bc1e1536ebfb487ff6379ab8b69a37555732b38d03267256c9bd4dcb6ab9c9d6cb93c8db9c290ccfa30a5731b8b409feb0bc13114732a62453a5ea8f0f66f427fa92d830a61484fc7e15cf8ca6e5d61e&pst=1665935236&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2421)
Hash 7d3c8970d5dce8c177b453b4f973f135
fa034df7ff5bbb8784b7e390c9be6b95dc9307f9
b0124d13e99add4a61d279c8bc23a63b1c8db6db02b798c2fe1646a289923bc3
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1455286919197.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22super%22%2C%22mario%22%2C%22odyssey%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&tz=0&dev=r&res=12.29&uuid=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1&shu=d68198c1fc6af5edd50ee10c5512bc1e1536ebfb487ff6379ab8b69a37555732b38d03267256c9bd4dcb6ab9c9d6cb93c8db9c290ccfa30a5731b8b409feb0bc13114732a62453a5ea8f0f66f427fa92d830a61484fc7e15cf8ca6e5d61e&pst=1665935236&rmtc=t HTTP/1.1
Host: massacreintentionalmemorize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Referer: http://xcigamesdd.com/
Connection: keep-alive
Cookie: u_pl=17596898; ain=eyJhbGciOiJIUzI1NiJ9.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.Y4odCyVk7OyhYr1gabzqlvHWOBP3cF3MwBStp4RTvAE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=136b2b81-36cd-41a0-9036-a698a79b149d:1:1; expires=Sun, 23 Oct 2022 15:46:17 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 17 Oct 2022 15:46:17 GMT; secure; SameSite=None
uncs=1; expires=Mon, 17 Oct 2022 15:46:17 GMT; secure; SameSite=None
pdhtkv27=true; expires=Mon, 17 Oct 2022 15:46:17 GMT; secure; SameSite=None
uncs27=1; expires=Mon, 17 Oct 2022 15:46:17 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 79ec822a3fc6578ac458392bd3422d01
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/99/35/d4/9935d4c8e01b802a5ca2501050ec07df/1663166290.png
200 OK 18 kB URL HTTP/2 cdn.cloudimagesb.com/cti/99/35/d4/9935d4c8e01b802a5ca2501050ec07df/1663166290.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 032097920221f2f3dfd1d90330c150af
38d7e2e3cc6487b8693c05718c9e3f5c69c8cbd1
335c9ff6bc0e02aa39aa3fea96e3eefa7977cb4fa841b7ae97093224253cb5f3
GET /cti/99/35/d4/9935d4c8e01b802a5ca2501050ec07df/1663166290.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 16 Oct 2022 15:46:17 GMT
content-type: image/png
content-length: 18018
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:38:18 GMT
etag: "6321e75a-4662"
expires: Tue, 18 Oct 2022 15:46:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitTuYg7kGU9SAoDIJ%2FIJPunsn8uIfFGKPBuFl3Fb1JdVXNpEx1V1PVNT3JKboge%2FAwBw%2Brp86bZINrCHrxZpDJgkhOmVsOG8%2BeFfEoPQZHP%2Bj%2B3lfvHd738%2FmuuyA%2BHD1ffldvS6XowmLNr778URBcq67JxA2qg3bz42bjWtX0X%2Bs0a%2F4r1bcE29QLoR%2F4fuAH1RVpRFcPFkoSMj3sBLWOX2uEtWCxgYH5f22dB0s98P4FeQqSTyoPvauQbIwk%2Fm5Z2M1Mp6%2B%2BGTtFM23Q5wcfJJuJzhPEM9g1HrrJwaUa2p6tHEMn%2B1O70P1%2FhZGcEO%2FnY0TJwaVJRP29qc9IQSSI%2BBXk%2FTGEGkPSMZi%2BA8nPCMA4bqwjie%2Ff0CanW%2F%2BwtGQnpPLn75D5hFQeXUUSHy0pOaje1splUicWg24BORhD9sZI3Qmy7TnI%2FAQs%2BwySEyRxAcmLac9SjiG7YygxBLUeXPlJD67rwaUeYn5eZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7HS1hBZOgRTQzCzg9TsYFMOYdxPsBsFLPdgswnx3ttBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xX2urIuCyxxe5nox0llvl%2B7rrCcSsptekCfLeXhX%2FriHTXFebTc6lPttX0Sc0g6jHc7bjW7IO902C%2Bt%2BE1YWkHZu2uq2nJDnfnBI5YTMyXuI6AmsOgGTT4O6ADQftUIfdGPUaPvYTo4GTPZoLCznNaZjcF0gzSrItrxddUGemW6m%2BsIXEOz0%2BoNnDx8LXvwNzBRITYFP5EOCnro7uqVzsndL55Z8v55mMpbbtNza7YxmYv7BO2Ir14avLtvhN6%2Bzkijh4fvCZms04TLpWfLtkuRcmBVtmCA%2FrtoPRXTT2Y0lZxKXrt18Y2U1To2wVupkDCrP1v8CkxNS%2BfR4eo5PTI4gzRjGFYjdKbkMSH0Clu7ApjP3Vs%2FDqJkmSueRu2Jkwmj2qCSBErOaRgXsf%2BpohnftXfRMCJrdmV5h3xToqwJUDWHd46MsNafXf%2FmqjK8RqcooUqayFymjvpyQ5%2Bcflb%2BL6ZBL9CusPK%2B26nWfNjuLQatFRStqhO1uM%2BCUho1m2GzSOjI7YWsvvf03AAAA%2F%2F8BAAD%2F%2F2uc3dRoBAAA
200 OK 7 B URL HTTP/1.1 diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitTuYg7kGU9SAoDIJ%2FIJPunsn8uIfFGKPBuFl3Fb1JdVXNpEx1V1PVNT3JKboge%2FAwBw%2Brp86bZINrCHrxZpDJgkhOmVsOG8%2BeFfEoPQZHP%2Bj%2B3lfvHd738%2FmuuyA%2BHD1ffldvS6XowmLNr778URBcq67JxA2qg3bz42bjWtX0X%2Bs0a%2F4r1bcE29QLoR%2F4fuAH1RVpRFcPFkoSMj3sBLWOX2uEtWCxgYH5f22dB0s98P4FeQqSTyoPvauQbIwk%2Fm5Z2M1Mp6%2B%2BGTtFM23Q5wcfJJuJzhPEM9g1HrrJwaUa2p6tHEMn%2B1O70P1%2FhZGcEO%2FnY0TJwaVJRP29qc9IQSSI%2BBXk%2FTGEGkPSMZi%2BA8nPCMA4bqwjie%2Ff0CanW%2F%2BwtGQnpPLn75D5hFQeXUUSHy0pOaje1splUicWg24BORhD9sZI3Qmy7TnI%2FAQs%2BwySEyRxAcmLac9SjiG7YygxBLUeXPlJD67rwaUeYn5eZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7HS1hBZOgRTQzCzg9TsYFMOYdxPsBsFLPdgswnx3ttBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xX2urIuCyxxe5nox0llvl%2B7rrCcSsptekCfLeXhX%2FriHTXFebTc6lPttX0Sc0g6jHc7bjW7IO902C%2Bt%2BE1YWkHZu2uq2nJDnfnBI5YTMyXuI6AmsOgGTT4O6ADQftUIfdGPUaPvYTo4GTPZoLCznNaZjcF0gzSrItrxddUGemW6m%2BsIXEOz0%2BoNnDx8LXvwNzBRITYFP5EOCnro7uqVzsndL55Z8v55mMpbbtNza7YxmYv7BO2Ir14avLtvhN6%2Bzkijh4fvCZms04TLpWfLtkuRcmBVtmCA%2FrtoPRXTT2Y0lZxKXrt18Y2U1To2wVupkDCrP1v8CkxNS%2BfR4eo5PTI4gzRjGFYjdKbkMSH0Clu7ApjP3Vs%2FDqJkmSueRu2Jkwmj2qCSBErOaRgXsf%2BpohnftXfRMCJrdmV5h3xToqwJUDWHd46MsNafXf%2FmqjK8RqcooUqayFymjvpyQ5%2Bcflb%2BL6ZBL9CusPK%2B26nWfNjuLQatFRStqhO1uM%2BCUho1m2GzSOjI7YWsvvf03AAAA%2F%2F8BAAD%2F%2F2uc3dRoBAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitTuYg7kGU9SAoDIJ%2FIJPunsn8uIfFGKPBuFl3Fb1JdVXNpEx1V1PVNT3JKboge%2FAwBw%2Brp86bZINrCHrxZpDJgkhOmVsOG8%2BeFfEoPQZHP%2Bj%2B3lfvHd738%2FmuuyA%2BHD1ffldvS6XowmLNr778URBcq67JxA2qg3bz42bjWtX0X%2Bs0a%2F4r1bcE29QLoR%2F4fuAH1RVpRFcPFkoSMj3sBLWOX2uEtWCxgYH5f22dB0s98P4FeQqSTyoPvauQbIwk%2Fm5Z2M1Mp6%2B%2BGTtFM23Q5wcfJJuJzhPEM9g1HrrJwaUa2p6tHEMn%2B1O70P1%2FhZGcEO%2FnY0TJwaVJRP29qc9IQSSI%2BBXk%2FTGEGkPSMZi%2BA8nPCMA4bqwjie%2Ff0CanW%2F%2BwtGQnpPLn75D5hFQeXUUSHy0pOaje1splUicWg24BORhD9sZI3Qmy7TnI%2FAQs%2BwySEyRxAcmLac9SjiG7YygxBLUeXPlJD67rwaUeYn5eZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7HS1hBZOgRTQzCzg9TsYFMOYdxPsBsFLPdgswnx3ttBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xX2urIuCyxxe5nox0llvl%2B7rrCcSsptekCfLeXhX%2FriHTXFebTc6lPttX0Sc0g6jHc7bjW7IO902C%2Bt%2BE1YWkHZu2uq2nJDnfnBI5YTMyXuI6AmsOgGTT4O6ADQftUIfdGPUaPvYTo4GTPZoLCznNaZjcF0gzSrItrxddUGemW6m%2BsIXEOz0%2BoNnDx8LXvwNzBRITYFP5EOCnro7uqVzsndL55Z8v55mMpbbtNza7YxmYv7BO2Ir14avLtvhN6%2Bzkijh4fvCZms04TLpWfLtkuRcmBVtmCA%2FrtoPRXTT2Y0lZxKXrt18Y2U1To2wVupkDCrP1v8CkxNS%2BfR4eo5PTI4gzRjGFYjdKbkMSH0Clu7ApjP3Vs%2FDqJkmSueRu2Jkwmj2qCSBErOaRgXsf%2BpohnftXfRMCJrdmV5h3xToqwJUDWHd46MsNafXf%2FmqjK8RqcooUqayFymjvpyQ5%2Bcflb%2BL6ZBL9CusPK%2B26nWfNjuLQatFRStqhO1uM%2BCUho1m2GzSOjI7YWsvvf03AAAA%2F%2F8BAAD%2F%2F2uc3dRoBAAA HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: u_pl=17560728; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec849ad080ebdaa9ca9dd84f2d9f8c2306=[2229213,2229214,2106764,2229215]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5269497b4884a85b696e1ec2000c327e
Strict-Transport-Security: max-age=0; includeSubdomains
diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuTuYg7kVlPQgKg%2BAfyKS7ZzI%2F7mExxmgwbtZdRW9SXVUzKVPd1VR1TU9yii4se%2FAwBw%2Brp843yQbXsOjFm0EmCyLBQ%2BaWw8azZ0U8So%2FB0QfF%2B1597%2FC9773bu%2B6c%2BHD0bPldvS2VoguLNb%2F68kdBcKW6JhM3qA7azY%2BbjStV03%2Bt06z5r1TfEmxTL4R%2B4PuBH1RXpBFdPVgoScj0sBPUOn6tEdaCxQYG5v%2B1dR4s9cD75%2BQpSD6pPPQuQ7IxkvjbZWE3M52%2B%2BmbsFM20QZ8ffJBsJjpPEM9g13joJgcX3dD2dOUIOtmfyoXu%2F9sYyQnxfjpClBxciETU35vqjBREgohfQt4fQ6gxJB2D6VuQ%2FJQAjOPaOpL43jVtcrr1D0tLdkIqf%2F4OmU9I5dFlJPGDJSUH1ZtauUzqxGLQLSAHY8jeGKk7RrY9B5kfg2WfQXKCJC4geTGdWcoxZHcMJYag1oMrn%2FTguh5c6iHmZ1UWBEHL54z67Q5jdd4SUZP7AW11Axr4zTYcK2UNkaVDMDUEMztIzQ425RDG%2FQi7UcByDzabEO%2B9HfR5gVwQ5JYgpwS5JMgzgrxf7HNlQ1vc48q6KLjI4UWuFyOd9Xbpvs56IiG76Tl5svTDu%2FTHXWyKs2q70aHcb%2Fsi4pR2GO1w3m50Q97ptllY95uwsoC0c9NRt%2BWEPPe9QyonZE7eRUSPYdUxmHwa1AWg%2BagV%2BqAbo0bbx3byYMBkj8bCcl5jOgbXBdKsgmzL21Xn5JnpZp6fP4dgJ1fvP3v4WPDib2CmQGoKfCIfEvTUndENnZO9Gzq35Lv1NJOx3Kbl1m5mNBPz998RW7k2fHXZDr9%2BnZVECQ%2FfFzZbowmXSc%2BSb5Yk58KsaMME%2BWHVfiii685uLDmTuHTt%2Bhsrq3FqhLVSJ2NQebr%2BF5ickMqnR9NzfOKX25BmDOMKxO6EXASkPgZLd2DTmXqr52HUrCdK55C7YmTCaPapJIESs5pGBex%2F6miGd%2B0d9EwImt2aXmHfFOirAlQNYd3joyw1J1d%2F%2FrKMrxCpyihSprIXKaO%2BKK19NPV3QqovfF6iX2HlWbVVr%2Fu02VkMWi0qWlEjbHebAac0bDTDZpPWkdkJW3vp7b8BAAD%2F%2FwEAAP%2F%2FjNAjwWgEAAA%3D
200 OK 7 B URL HTTP/1.1 diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuTuYg7kVlPQgKg%2BAfyKS7ZzI%2F7mExxmgwbtZdRW9SXVUzKVPd1VR1TU9yii4se%2FAwBw%2Brp843yQbXsOjFm0EmCyLBQ%2BaWw8azZ0U8So%2FB0QfF%2B1597%2FC9773bu%2B6c%2BHD0bPldvS2VoguLNb%2F68kdBcKW6JhM3qA7azY%2BbjStV03%2Bt06z5r1TfEmxTL4R%2B4PuBH1RXpBFdPVgoScj0sBPUOn6tEdaCxQYG5v%2B1dR4s9cD75%2BQpSD6pPPQuQ7IxkvjbZWE3M52%2B%2BmbsFM20QZ8ffJBsJjpPEM9g13joJgcX3dD2dOUIOtmfyoXu%2F9sYyQnxfjpClBxciETU35vqjBREgohfQt4fQ6gxJB2D6VuQ%2FJQAjOPaOpL43jVtcrr1D0tLdkIqf%2F4OmU9I5dFlJPGDJSUH1ZtauUzqxGLQLSAHY8jeGKk7RrY9B5kfg2WfQXKCJC4geTGdWcoxZHcMJYag1oMrn%2FTguh5c6iHmZ1UWBEHL54z67Q5jdd4SUZP7AW11Axr4zTYcK2UNkaVDMDUEMztIzQ425RDG%2FQi7UcByDzabEO%2B9HfR5gVwQ5JYgpwS5JMgzgrxf7HNlQ1vc48q6KLjI4UWuFyOd9Xbpvs56IiG76Tl5svTDu%2FTHXWyKs2q70aHcb%2Fsi4pR2GO1w3m50Q97ptllY95uwsoC0c9NRt%2BWEPPe9QyonZE7eRUSPYdUxmHwa1AWg%2BagV%2BqAbo0bbx3byYMBkj8bCcl5jOgbXBdKsgmzL21Xn5JnpZp6fP4dgJ1fvP3v4WPDib2CmQGoKfCIfEvTUndENnZO9Gzq35Lv1NJOx3Kbl1m5mNBPz998RW7k2fHXZDr9%2BnZVECQ%2FfFzZbowmXSc%2BSb5Yk58KsaMME%2BWHVfiii685uLDmTuHTt%2Bhsrq3FqhLVSJ2NQebr%2BF5ickMqnR9NzfOKX25BmDOMKxO6EXASkPgZLd2DTmXqr52HUrCdK55C7YmTCaPapJIESs5pGBex%2F6miGd%2B0d9EwImt2aXmHfFOirAlQNYd3joyw1J1d%2F%2FrKMrxCpyihSprIXKaO%2BKK19NPV3QqovfF6iX2HlWbVVr%2Fu02VkMWi0qWlEjbHebAac0bDTDZpPWkdkJW3vp7b8BAAD%2F%2FwEAAP%2F%2FjNAjwWgEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuTuYg7kVlPQgKg%2BAfyKS7ZzI%2F7mExxmgwbtZdRW9SXVUzKVPd1VR1TU9yii4se%2FAwBw%2Brp843yQbXsOjFm0EmCyLBQ%2BaWw8azZ0U8So%2FB0QfF%2B1597%2FC9773bu%2B6c%2BHD0bPldvS2VoguLNb%2F68kdBcKW6JhM3qA7azY%2BbjStV03%2Bt06z5r1TfEmxTL4R%2B4PuBH1RXpBFdPVgoScj0sBPUOn6tEdaCxQYG5v%2B1dR4s9cD75%2BQpSD6pPPQuQ7IxkvjbZWE3M52%2B%2BmbsFM20QZ8ffJBsJjpPEM9g13joJgcX3dD2dOUIOtmfyoXu%2F9sYyQnxfjpClBxciETU35vqjBREgohfQt4fQ6gxJB2D6VuQ%2FJQAjOPaOpL43jVtcrr1D0tLdkIqf%2F4OmU9I5dFlJPGDJSUH1ZtauUzqxGLQLSAHY8jeGKk7RrY9B5kfg2WfQXKCJC4geTGdWcoxZHcMJYag1oMrn%2FTguh5c6iHmZ1UWBEHL54z67Q5jdd4SUZP7AW11Axr4zTYcK2UNkaVDMDUEMztIzQ425RDG%2FQi7UcByDzabEO%2B9HfR5gVwQ5JYgpwS5JMgzgrxf7HNlQ1vc48q6KLjI4UWuFyOd9Xbpvs56IiG76Tl5svTDu%2FTHXWyKs2q70aHcb%2Fsi4pR2GO1w3m50Q97ptllY95uwsoC0c9NRt%2BWEPPe9QyonZE7eRUSPYdUxmHwa1AWg%2BagV%2BqAbo0bbx3byYMBkj8bCcl5jOgbXBdKsgmzL21Xn5JnpZp6fP4dgJ1fvP3v4WPDib2CmQGoKfCIfEvTUndENnZO9Gzq35Lv1NJOx3Kbl1m5mNBPz998RW7k2fHXZDr9%2BnZVECQ%2FfFzZbowmXSc%2BSb5Yk58KsaMME%2BWHVfiii685uLDmTuHTt%2Bhsrq3FqhLVSJ2NQebr%2BF5ickMqnR9NzfOKX25BmDOMKxO6EXASkPgZLd2DTmXqr52HUrCdK55C7YmTCaPapJIESs5pGBex%2F6miGd%2B0d9EwImt2aXmHfFOirAlQNYd3joyw1J1d%2F%2FrKMrxCpyihSprIXKaO%2BKK19NPV3QqovfF6iX2HlWbVVr%2Fu02VkMWi0qWlEjbHebAac0bDTDZpPWkdkJW3vp7b8BAAD%2F%2FwEAAP%2F%2FjNAjwWgEAAA%3D HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: u_pl=17560728; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec849ad080ebdaa9ca9dd84f2d9f8c2306=[2229213,2229214,2106764,2229215]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c791e518a581e8af1bc752fc31c892e2
Strict-Transport-Security: max-age=0; includeSubdomains
diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeta%2F46ZcGUCiQQDoh8U9C59298%2F0hRYQxBgsThwQEHZqdmTsPnt1Zzezcnl0ZIkEKiisoAtX6OzsWwYqgocNC50gIWRS%2BzkVMTQ1ClGgvFgdP2n3vzfcV3%2Fve%2B3TXnRMfjp4tv623pVJ0YbHmV1%2F8IAiuVNdk4gbVQbv5YbNxpWr6r3SaNf%2Bl6huCbeqF0A98P%2FCD6oo0oqsHCyUImR52glrHrzXCWrDYwMD8t7fOg6UeeP%2BcPAHJJ5UH3mVINkYSf7ss7Gam05dfj52imTbo84P3ks1E5wniWdk1HrrJwQUb2p6uHEEn%2B1O50P1%2FiJGcEO%2BnI0TJwYVIRP29qc5IQSSI%2BCXk%2FTGEGkPSMZi%2BBclPCcA4rq0jie9e0yanW49QWqITUvnzd8h8QioPLyOJ7y8pOaje1MplUicWg24BORhD9sZI3TGy7TnI%2FBgs%2BwSSEyRxAcmL6cxSjiG7YygxBLUeXPlJD67rwaUeYn5WZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7FS1hBZOgRTQzCzg9TsYFMOYdyPsBsFLPdgswnx3tlBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xV2urIuCixxe5Hox0llvl%2B7rrCcSspuek8dLP7xLf9zBpjirthsdyv22LyJOaYfRDuftRjfknW6bhXW%2FCSsLSDs3HXVbTsgz3zukckLm5B1E9BhWHYPJJ0FdAJqPWqEPujFqtH1sJ%2FcHTPZoLCznNaZjcF0gzSrItrxddU6emm7m2flfIdjJ1XtPH%2F4veP43MFMgNQU%2Bkg8Ieur26IbOyd4NnVvy3XqayVhu03JrNzOaifl7b4mtXBu%2BumyHX7%2FKSqAsD98VNlujCZdJz5JvliTnwqxowwT5YdW%2BL6Lrzm4sOZO4dO36ayurcWqEtVInY1B5uv4XmJyQysdH03N87JfPIM0YxhWI3Qm5CEh9DJbuwKYz9VbPw6gZJ0oryF0xMmE0e1SSQIlZT6MC9l99NKt37W30TAia3ZpeYd8U6KsCVA1h3f9HWWpOrv78ZRlfIVKVUaRMZS9SRn1RWvuw%2FJ1PSPW5zx85beVZtVWv%2B7TZWQxaLSpaUSNsd5sBpzRsNMNmk9aR2Qlbe%2BHNvwEAAP%2F%2FAQAA%2F%2F8qZD1VaAQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 diminutioneconomy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeta%2F46ZcGUCiQQDoh8U9C59298%2F0hRYQxBgsThwQEHZqdmTsPnt1Zzezcnl0ZIkEKiisoAtX6OzsWwYqgocNC50gIWRS%2BzkVMTQ1ClGgvFgdP2n3vzfcV3%2Fve%2B3TXnRMfjp4tv623pVJ0YbHmV1%2F8IAiuVNdk4gbVQbv5YbNxpWr6r3SaNf%2Bl6huCbeqF0A98P%2FCD6oo0oqsHCyUImR52glrHrzXCWrDYwMD8t7fOg6UeeP%2BcPAHJJ5UH3mVINkYSf7ss7Gam05dfj52imTbo84P3ks1E5wniWdk1HrrJwQUb2p6uHEEn%2B1O50P1%2FiJGcEO%2BnI0TJwYVIRP29qc5IQSSI%2BCXk%2FTGEGkPSMZi%2BBclPCcA4rq0jie9e0yanW49QWqITUvnzd8h8QioPLyOJ7y8pOaje1MplUicWg24BORhD9sZI3TGy7TnI%2FBgs%2BwSSEyRxAcmL6cxSjiG7YygxBLUeXPlJD67rwaUeYn5WZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7FS1hBZOgRTQzCzg9TsYFMOYdyPsBsFLPdgswnx3tlBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xV2urIuCixxe5Hox0llvl%2B7rrCcSspuek8dLP7xLf9zBpjirthsdyv22LyJOaYfRDuftRjfknW6bhXW%2FCSsLSDs3HXVbTsgz3zukckLm5B1E9BhWHYPJJ0FdAJqPWqEPujFqtH1sJ%2FcHTPZoLCznNaZjcF0gzSrItrxddU6emm7m2flfIdjJ1XtPH%2F4veP43MFMgNQU%2Bkg8Ieur26IbOyd4NnVvy3XqayVhu03JrNzOaifl7b4mtXBu%2BumyHX7%2FKSqAsD98VNlujCZdJz5JvliTnwqxowwT5YdW%2BL6Lrzm4sOZO4dO36ayurcWqEtVInY1B5uv4XmJyQysdH03N87JfPIM0YxhWI3Qm5CEh9DJbuwKYz9VbPw6gZJ0oryF0xMmE0e1SSQIlZT6MC9l99NKt37W30TAia3ZpeYd8U6KsCVA1h3f9HWWpOrv78ZRlfIVKVUaRMZS9SRn1RWvuw%2FJ1PSPW5zx85beVZtVWv%2B7TZWQxaLSpaUSNsd5sBpzRsNMNmk9aR2Qlbe%2BHNvwEAAP%2F%2FAQAA%2F%2F8qZD1VaAQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeta%2F46ZcGUCiQQDoh8U9C59298%2F0hRYQxBgsThwQEHZqdmTsPnt1Zzezcnl0ZIkEKiisoAtX6OzsWwYqgocNC50gIWRS%2BzkVMTQ1ClGgvFgdP2n3vzfcV3%2Fve%2B3TXnRMfjp4tv623pVJ0YbHmV1%2F8IAiuVNdk4gbVQbv5YbNxpWr6r3SaNf%2Bl6huCbeqF0A98P%2FCD6oo0oqsHCyUImR52glrHrzXCWrDYwMD8t7fOg6UeeP%2BcPAHJJ5UH3mVINkYSf7ss7Gam05dfj52imTbo84P3ks1E5wniWdk1HrrJwQUb2p6uHEEn%2B1O50P1%2FiJGcEO%2BnI0TJwYVIRP29qc5IQSSI%2BCXk%2FTGEGkPSMZi%2BBclPCcA4rq0jie9e0yanW49QWqITUvnzd8h8QioPLyOJ7y8pOaje1MplUicWg24BORhD9sZI3TGy7TnI%2FBgs%2BwSSEyRxAcmL6cxSjiG7YygxBLUeXPlJD67rwaUeYn5WZUEQtHzOqN%2FuMFbnLRE1uR%2FQVjeggd9sw7FS1hBZOgRTQzCzg9TsYFMOYdyPsBsFLPdgswnx3tlBnxfIBUFuCXJKkEuCPCPI%2B8U%2BVza0xV2urIuCixxe5Hox0llvl%2B7rrCcSspuek8dLP7xLf9zBpjirthsdyv22LyJOaYfRDuftRjfknW6bhXW%2FCSsLSDs3HXVbTsgz3zukckLm5B1E9BhWHYPJJ0FdAJqPWqEPujFqtH1sJ%2FcHTPZoLCznNaZjcF0gzSrItrxddU6emm7m2flfIdjJ1XtPH%2F4veP43MFMgNQU%2Bkg8Ieur26IbOyd4NnVvy3XqayVhu03JrNzOaifl7b4mtXBu%2BumyHX7%2FKSqAsD98VNlujCZdJz5JvliTnwqxowwT5YdW%2BL6Lrzm4sOZO4dO36ayurcWqEtVInY1B5uv4XmJyQysdH03N87JfPIM0YxhWI3Qm5CEh9DJbuwKYz9VbPw6gZJ0oryF0xMmE0e1SSQIlZT6MC9l99NKt37W30TAia3ZpeYd8U6KsCVA1h3f9HWWpOrv78ZRlfIVKVUaRMZS9SRn1RWvuw%2FJ1PSPW5zx85beVZtVWv%2B7TZWQxaLSpaUSNsd5sBpzRsNMNmk9aR2Qlbe%2BHNvwEAAP%2F%2FAQAA%2F%2F8qZD1VaAQAAA%3D%3D HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: u_pl=17560728; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec849ad080ebdaa9ca9dd84f2d9f8c2306=[2229213,2229214,2106764,2229215]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7ed14867048a13f10aabbac4bcdd9690
Strict-Transport-Security: max-age=0; includeSubdomains
diminutioneconomy.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
200 OK 29 kB URL HTTP/1.1 diminutioneconomy.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 340bee3c23530f4bf8126dd4d1cf1b1f
21ae610123b5c8f412cc537e04d1ca0124820a99
7ff7f0470155d914e790d6a3b55e617b9be5d586d2e6e0049eeadeff865d2a54
GET /65/aa/28/65aa283021630dfd9030555c4c61a78c.js HTTP/1.1
Host: diminutioneconomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 962cd8833ee0eb2b07c3876880318690
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 16 Oct 2022 14:41:09 GMT
expires: Sun, 16 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 3908
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 28 kB URL HTTP/1.1 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 37fcdad209bc3a30bb8ce6c9fe0657bb
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Sun, 16 Oct 2022 15:46:17 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rt%2BZnCUd33Km%2F8W1%2FHxILZ%2BFE2%2FONVPmdoRO3kz95Vdh%2FDWoJ9bMbeuajmG%2BSh20ByqB%2B8YmCL06B22X7Xc7Xr5udlhhKvvnzkruvU7C%2BRB2n6kQlHoYAh2h%2BpXXe3AKY7GxnNM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75b1ed2adf0871c8-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
invaderannihilationperky.com/pixel/purst?dl=0&th=0&sc=0&rs=3336&rd=3336&fd=421&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 invaderannihilationperky.com/pixel/purst?dl=0&th=0&sc=0&rs=3336&rd=3336&fd=421&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=3336&rd=3336&fd=421&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: invaderannihilationperky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
xcigamesdd.com/koko-analytics-collect.php?p=4189&nv=1&up=1&r=&rqp=rjm97ie7sw
200 OK 43 B URL HTTP/1.1 xcigamesdd.com/koko-analytics-collect.php?p=4189&nv=1&up=1&r=&rqp=rjm97ie7sw
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /koko-analytics-collect.php?p=4189&nv=1&up=1&r=&rqp=rjm97ie7sw HTTP/1.1
Host: xcigamesdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/super-mario-odyssey-v327/
Cookie: _ga_LTBNRSB0H2=GS1.1.1665935178.1.0.1665935178.0.0.0; _ga=GA1.2.1059727917.1665935179; prefetchAd_5260642=true; dom3ic8zudi28v8lr6fgphwffqoz0j6c=136b2b81-36cd-41a0-9036-a698a79b149d%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=diminutioneconomy.com; _gid=GA1.2.1326416425.1665935181; _gat_gtag_UA_12043064_122=1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: image/gif
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
tk: N
content-length: 43
date: Sun, 16 Oct 2022 15:46:16 GMT
vary: Accept-Encoding
unseenreport.com/pxf.gif?uuid=136b2b81-36cd-41a0-9036-a698a79b149d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=15
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=136b2b81-36cd-41a0-9036-a698a79b149d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=15
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=136b2b81-36cd-41a0-9036-a698a79b149d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 16 Oct 2022 15:46:18 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3e00ccca4e1ff306fc11fa845154fd75
Strict-Transport-Security: max-age=0; includeSubdomains
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e86d948bf8ed2f5918f8323b043ad5f
41548e231e2358d3453e7630f0d07a645cc25ddc
6602f2a020618234d34a9b6cd107398f0405de6dd14227e265aca84b38eaa5cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72044c0-fdd0-4da5-aa61-159d966f040f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7075
x-amzn-requestid: 254a8860-b3bf-4e8d-a08d-31effa209a6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aEL5iGQqIAMFmkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b26a3-1a2820f550f35bf830444c22;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 21:31:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: psWLknan4sVucDaNcLURe-XRPs5FKeJ0Il7ZGWvBxV2rgpTrQvbyVw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 15 Oct 2022 21:41:19 GMT
etag: "41548e231e2358d3453e7630f0d07a645cc25ddc"
content-type: image/jpeg
age: 65104
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
arsnivyr.com/9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28
200 OK 0 B URL HTTP/2 arsnivyr.com/9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28
IP
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Fsuper-mario-odyssey-v327%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=02aecf5ebc234aaeb2b58c36f5876e28 HTTP/1.1
Host: arsnivyr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1240
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:15 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 86923e40454b168628a742b9ad15775e
access-control-expose-headers: X-Sc
x-sc: wijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE=
set-cookie: scm=1; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
OAID=02aecf5ebc234aaeb2b58c36f5876e28; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
oaidts=1665935175; expires=Mon, 16 Oct 2023 15:46:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Rubik
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Rubik
IP
GET /css?family=Rubik HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 16 Oct 2022 15:46:14 GMT
date: Sun, 16 Oct 2022 15:46:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
interstitial-07.com/?l=cl3tvCFV5t9QRqB&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Farsnivyr.com%2F12%3Frnd%3D1380739040%26z%3D5382937%26b%3D15242990%26c%3D6199011%26var%3D%26d%3Dhttps%253A%252F%252Finvestiremercato.it%252F%253Fos%253D%257Bos%257D%2526banner%253D%257Bbannerid%257D%2526country%253D%257Bcountry%257D%2526zoneid%253D%257Bzoneid%257D%2526zone_type%253D%257Bzone_type%257D%2526cost%253D%257Bcost%257D%2526clickid%253D%2524%257BSUBID%257D%26cln%3D1%26btp%3D7%26rb%3DoQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q%3D%3D%26bag%3DsEGAJXp1lLMCUu3u712rZNm7OPdtTHTp%26ruid%3Dc464a7e3-65cc-4edc-8a02-665b7093ae47%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttp%253A%252F%252Fxcigamesdd.com%252Fsuper-mario-odyssey-v327%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D939%26wfc%3D1%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0%26X-Sc%3Dwijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE%3D
200 OK 0 B URL HTTP/2 interstitial-07.com/?l=cl3tvCFV5t9QRqB&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Farsnivyr.com%2F12%3Frnd%3D1380739040%26z%3D5382937%26b%3D15242990%26c%3D6199011%26var%3D%26d%3Dhttps%253A%252F%252Finvestiremercato.it%252F%253Fos%253D%257Bos%257D%2526banner%253D%257Bbannerid%257D%2526country%253D%257Bcountry%257D%2526zoneid%253D%257Bzoneid%257D%2526zone_type%253D%257Bzone_type%257D%2526cost%253D%257Bcost%257D%2526clickid%253D%2524%257BSUBID%257D%26cln%3D1%26btp%3D7%26rb%3DoQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q%3D%3D%26bag%3DsEGAJXp1lLMCUu3u712rZNm7OPdtTHTp%26ruid%3Dc464a7e3-65cc-4edc-8a02-665b7093ae47%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttp%253A%252F%252Fxcigamesdd.com%252Fsuper-mario-odyssey-v327%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D939%26wfc%3D1%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0%26X-Sc%3Dwijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE%3D
IP
GET /?l=cl3tvCFV5t9QRqB&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Farsnivyr.com%2F12%3Frnd%3D1380739040%26z%3D5382937%26b%3D15242990%26c%3D6199011%26var%3D%26d%3Dhttps%253A%252F%252Finvestiremercato.it%252F%253Fos%253D%257Bos%257D%2526banner%253D%257Bbannerid%257D%2526country%253D%257Bcountry%257D%2526zoneid%253D%257Bzoneid%257D%2526zone_type%253D%257Bzone_type%257D%2526cost%253D%257Bcost%257D%2526clickid%253D%2524%257BSUBID%257D%26cln%3D1%26btp%3D7%26rb%3DoQyuewRzIciwb-bfrlbcXwhvY731BG62kaYvDK_NYk4uE5eZUFTYgHlIjAiU9ySa9RDhUozMBEtRRlQiAhRUyrEk0pccmARsSH8l4KBg4LnC-Szh_4A_HP0BIlZmI7i1bXO8rPTDwJR-5HU6CJF4jSpcBPfssUa3bCf2F9ro1msUPBosepLmLWcxb10N4UeeYnDHi-S67SJGmhOUVTkIzkYGU1BGNROHnWf2FE_s1rfAiHby3LnsXAcV5MN4IdiCdEZoEXD_MVEy5MSjZh9273-2cdhh1O1y0evqeRVztO5LpD7UsQc0TaKkk_E883aPHVN4zeONfn8M2DaMlrvBJ4tXRc9EqyDDv0GAFIgqerYXt3PIl0n4OnOyAJ1T1LBYr6ZqUr6xzF9LwcIIRbeCSz1gVNk0iR3tshZlMQ_1MNTDHYtrwuu8bcqPsDUoT3FsS3Dx_CZKNpYUhESxvINDli2Hvq1-4QJTFhEGlFunBnQzHqgu6JJNzn-qFI9DXcamAnsjARySrqahffO9rI4K84cRrZ02U-nvIyXpyhZR585lN8Snfb36l8TB70WBb98nPo3DYi0XDNvTAjBdkD_oehYiD-ZNLzRRlCf9XPfn4koQsS5wM5dH_RS6_XHd5n2xILMVGxW1niyo3t4TA3AV77gGlvZh9M-5B3K3fspmshpzLGOxPi7EfAW02BW6O_ziIHB20E6pV_amI4JSUUV39Q%3D%3D%26bag%3DsEGAJXp1lLMCUu3u712rZNm7OPdtTHTp%26ruid%3Dc464a7e3-65cc-4edc-8a02-665b7093ae47%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttp%253A%252F%252Fxcigamesdd.com%252Fsuper-mario-odyssey-v327%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D939%26wfc%3D1%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0%26X-Sc%3Dwijshv2y3-NvNpOGOCU23umpLSvmwpn8konSsksnhWQpAm4zRCJiP8GZ5ytFeDZ8opQ4vxSgViZmmqtqoU_X5KrD1FE%3D HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 16 Oct 2022 15:46:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
set-cookie: reverse=lRZoJLMCZS-snFVbpkzedjAdbQ7yeaIRLMmGkH1nkOY; expires=Sun, 16-Oct-2022 16:46:16 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
107.6.168.100
173.233.137.52
139.45.197.152
104.18.32.68
23.36.76.249
3.66.118.16