spdwlg.com/dl/0f17a45c0bf43003595e2625e624938b/637fa3d1/200148654/games/cheat/wingsremaster-ch.zip
302 Found 0 B URL HTTP/1.1 spdwlg.com/dl/0f17a45c0bf43003595e2625e624938b/637fa3d1/200148654/games/cheat/wingsremaster-ch.zip
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /dl/0f17a45c0bf43003595e2625e624938b/637fa3d1/200148654/games/cheat/wingsremaster-ch.zip HTTP/1.1
Host: spdwlg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Location: https://www.softpedia.com/redir2.php?pid=200148654
Content-Length: 0
Date: Fri, 25 Nov 2022 16:28:51 GMT
Server: SPD/P5
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9903
Expires: Fri, 25 Nov 2022 19:13:54 GMT
Date: Fri, 25 Nov 2022 16:28:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3778
Cache-Control: max-age=155121
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:51 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:34:12 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 16:19:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 582
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7963
Expires: Fri, 25 Nov 2022 18:41:34 GMT
Date: Fri, 25 Nov 2022 16:28:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 3a950bf878c5b9fa1afa1ccc4395a2b9
2cb355759e6eedc1a90b43f169cebb2334c6be59
69d0550080867c986be3b55978468b332e9509d5f6407d56afa6257703928c48
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5395
Cache-Control: max-age=115670
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:51 GMT
Etag: "637ff906-1d7"
Expires: Sun, 27 Nov 2022 00:36:41 GMT
Last-Modified: Thu, 24 Nov 2022 23:06:46 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: feI48djxUHf8G++wEjCagWLVIakaLRPB1PvpWeDK6rsYInQTv1y0O4KiTgxUmv4aIlSj+j4k/xdolK/gqOD8xg==
x-amz-request-id: 6KR5QN1Q49H6JHQZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 15:40:51 GMT
age: 2880
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 16:28:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 16:08:53 GMT
cache-control: public,max-age=3600
age: 1199
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3a950bf878c5b9fa1afa1ccc4395a2b9
2cb355759e6eedc1a90b43f169cebb2334c6be59
69d0550080867c986be3b55978468b332e9509d5f6407d56afa6257703928c48
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5396
Cache-Control: max-age=115670
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:52 GMT
Etag: "637ff906-1d7"
Expires: Sun, 27 Nov 2022 00:36:42 GMT
Last-Modified: Thu, 24 Nov 2022 23:06:46 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.softpedia.com/redir2.php?pid=200148654
200 OK 586 B URL HTTP/2 www.softpedia.com/redir2.php?pid=200148654
IP
Hash cf9eb87defbc01a5f1e6e4ff764f8e4f
c23992888072b94a4d9aa0088a9e9ea7f17e363a
2112bdca055274c8801e05496a03e184338c71e941c0698a88ad97f1d965923b
GET /redir2.php?pid=200148654 HTTP/1.1
Host: www.softpedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:52 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 76fbc2879d53b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gw5NYys3ku0pOskaonnYJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9QU8u8CeDnT89SE5Aq/zoptvh80=
games.softpedia.com/progDownload/Wings-Remastered-Edition-5-Trainer-Download-148654.html
301 Moved Permanently 0 B URL HTTP/1.1 games.softpedia.com/progDownload/Wings-Remastered-Edition-5-Trainer-Download-148654.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /progDownload/Wings-Remastered-Edition-5-Trainer-Download-148654.html HTTP/1.1
Host: games.softpedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 16:28:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 25 Nov 2022 17:28:53 GMT
Location: https://games.softpedia.com/progDownload/Wings-Remastered-Edition-5-Trainer-Download-148654.html
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76fbc29259a7b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9070
Expires: Fri, 25 Nov 2022 19:00:03 GMT
Date: Fri, 25 Nov 2022 16:28:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9070
Expires: Fri, 25 Nov 2022 19:00:03 GMT
Date: Fri, 25 Nov 2022 16:28:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9070
Expires: Fri, 25 Nov 2022 19:00:03 GMT
Date: Fri, 25 Nov 2022 16:28:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9070
Expires: Fri, 25 Nov 2022 19:00:03 GMT
Date: Fri, 25 Nov 2022 16:28:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8784bb7a8b88736a6016f712e3183bf3
b0ddc1555d2506177adcdcea77864d75f1245d07
8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11743
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cICD-F7joAMFqmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:45 GMT
age: 66848
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 05:04:28 GMT
age: 41065
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DYBcunpyI0FBJsJGh1kKpFI3X8kzCkO3mCxzUtWnaMKBT-Bv-zkq3Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:59:20 GMT
age: 66573
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:23:00 GMT
age: 43553
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NntLZ3wUdcX9kEo-afFLU0TPKgqAlSK3bToNh2mmoqoyLBJINNk7ow==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:39 GMT
age: 66854
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:53 GMT
age: 67260
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 14:41:08 GMT
expires: Fri, 25 Nov 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 6467
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 3097863d148e6cdfee35da37197a4199
af9c3a80ff613a6a0410ab252f5e2cb06343c85d
59466fd91db19a9c60aa70b5a2b48e21638d0dc554bff4d96a34bf678e174692
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27210
date: Fri, 25 Nov 2022 16:28:55 GMT
expires: Fri, 25 Nov 2022 16:28:55 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1402 / 979 of 1000 / last-modified: 1669244741"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4885)
Hash e3f6d5089dbd55d1dc3323cb5586ce84
1c058380ea4b784a2e7c10ee0b52a987283062c7
607e067ce2722fa84506a57f57813d5654e9c4cf6d93fd850d94a6a9c83963e0
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 25 Nov 2022 16:28:55 GMT
expires: Fri, 25 Nov 2022 16:28:55 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8533960418097531890
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221110/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Thu, 24 Nov 2022 18:45:12 GMT
expires: Thu, 08 Dec 2022 18:45:12 GMT
cache-control: public, max-age=1209600
age: 78223
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-61277-1&cid=1016331848.1669393735&jid=1645100454&gjid=584309208&_gid=1634090516.1669393735&_u=YEBAAAAAAAAAACAAI~&z=944848051
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-61277-1&cid=1016331848.1669393735&jid=1645100454&gjid=584309208&_gid=1634090516.1669393735&_u=YEBAAAAAAAAAACAAI~&z=944848051
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-61277-1&cid=1016331848.1669393735&jid=1645100454&gjid=584309208&_gid=1634090516.1669393735&_u=YEBAAAAAAAAAACAAI~&z=944848051 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://games.softpedia.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 16:28:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=games.softpedia.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=games.softpedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=games.softpedia.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=games.softpedia.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
301 Moved Permanently 167 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 167
location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js
server: CloudFront
date: Thu, 24 Nov 2022 22:27:13 GMT
via: 1.1 36cd2d0f34e25c2dc5099656a60bedac.cloudfront.net (CloudFront), 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: e2IQcGlPV4Dpnfrq8wfa4NwhOSlKwowNiYKdlW57GQ7lp1p9KyMyhg==
age: 64902
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 312d6119e2a9865fd7bd8752bcf62563
fcddb4e1098fe901119e2ec5de135e26b586f897
ed8c44b9621baf009fe6320d2c54a97d18fad60c5cc54646ea00384a0198e734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=games.softpedia.com&callback=_gfp_s_&client=ca-pub-2364887827571271&gpid_exp=1
200 OK 255 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=games.softpedia.com&callback=_gfp_s_&client=ca-pub-2364887827571271&gpid_exp=1
IP
File type ASCII text, with very long lines (393), with no line terminators
Hash e7c501035d51d757a018e1b32c9bd98b
3b233902d31e08d015a5ca4bf8cb0af301dbeeb2
b58504371813d4effc863532f86bd8a6838ac9f23e6b6d5ca7185032d724f57b
GET /gampad/cookie.js?domain=games.softpedia.com&callback=_gfp_s_&client=ca-pub-2364887827571271&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:55 GMT
server: cafe
cache-control: private
content-length: 255
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 312d6119e2a9865fd7bd8752bcf62563
fcddb4e1098fe901119e2ec5de135e26b586f897
ed8c44b9621baf009fe6320d2c54a97d18fad60c5cc54646ea00384a0198e734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fgames.softpedia.com&pubid=7db38df2-4062-4df4-9018-dcf399a364c8
200 OK 830 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fgames.softpedia.com&pubid=7db38df2-4062-4df4-9018-dcf399a364c8
IP
File type JSON data\012- , ASCII text, with very long lines (830), with no line terminators
Hash d83440be97e02520a232271c7e157ab6
d37c5af238f0e1457afab3bdca874e71115a038b
d1f34063fe98fc18e5bd53e2b2f6bd6f15463be76655636ab48746361b8b7312
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fgames.softpedia.com&pubid=7db38df2-4062-4df4-9018-dcf399a364c8 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 830
access-control-allow-origin: https://games.softpedia.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Fri, 25 Nov 2022 16:28:55 GMT
server: Server
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X8LwJ17pat-NFnY_DvdzdPU622yBpAv5OFP2HSOv8m1K6IFzl6rfXw==
X-Firefox-Spdy: h2
secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
200 OK 17 kB URL HTTP/2 secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (36525), with NEL line terminators
Hash 65875d9adc4599663a61e744c57d3e08
da7689e79bd92cd1c676badf0fb897f045d48653
830050c7e3b735c29efa65defb4de8dc42969a8cbb12e520479f9d067a90f4bf
GET /js/pubcid/latest/pubcid.min.js HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Thu, 13 Oct 2022 18:14:48 GMT
etag: "d4ed-5eaee7c12df48-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 17131
content-type: application/javascript
cache-control: max-age=900
expires: Fri, 25 Nov 2022 16:43:56 GMT
date: Fri, 25 Nov 2022 16:28:56 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&pid=HiPZJhxJpnWMU&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a634__%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a7bd__%22%2C%22s%22%3A%5B%22300x600%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462ab2e__%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&pubid=7db38df2-4062-4df4-9018-dcf399a364c8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A100%7D
200 OK 210 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&pid=HiPZJhxJpnWMU&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a634__%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a7bd__%22%2C%22s%22%3A%5B%22300x600%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462ab2e__%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&pubid=7db38df2-4062-4df4-9018-dcf399a364c8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A100%7D
IP
File type ASCII text, with no line terminators
Hash ed70e1031c0e56491d52adc6301ebcb4
2cf0c386b01f9a81694c178de879619ab64a7b80
a137d15e159b7f65ddd1f6ba408cf3634d15bb015e6e2b75f674d028f3a79439
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&pid=HiPZJhxJpnWMU&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a634__%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462a7bd__%22%2C%22s%22%3A%5B%22300x600%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%2C%7B%22sd%22%3A%22Softpedia___software_programpage__placement_6380ed462ab2e__%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F1004334%2FSoftpedia%2Fsoftware_programpage%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&pubid=7db38df2-4062-4df4-9018-dcf399a364c8&gdprl=%7B%22status%22%3A%22no-cmp%22%2C%22cmpTimeout%22%3A100%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 210
server: Server
date: Fri, 25 Nov 2022 16:28:56 GMT
x-amz-rid: Y9CP883A1KSZPJ23QGF8
access-control-allow-origin: https://games.softpedia.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lycVYXYu2KWdXxyrDAU5k5aEhSIDd8t_lEHIgAIZVSfAX9E5lb9j_Q==
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=games.softpedia.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:56 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: 7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Fri, 25 Nov 2022 16:28:56 GMT
expires: Sat, 25 Nov 2023 16:28:56 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f77ee08c588d427b057eff8c9680d8c
26f765e4563acb057df4a3e49f50346567cafaea
bf75efdaa7e228686b2c4ea1167a30e234af14e0a8389f4542d1ecd1d83a2ec2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f77ee08c588d427b057eff8c9680d8c
26f765e4563acb057df4a3e49f50346567cafaea
bf75efdaa7e228686b2c4ea1167a30e234af14e0a8389f4542d1ecd1d83a2ec2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1540)
Hash d22e40b1bc4f1b0f1727b96a0f32f7dd
57030c5040f0013120cca1e77fe38af35d4610e0
6f6d3797f9b19ffcd2f416a7566a58cf70fd4fb0ab17dec03fa5b690c6939494
GET /pagead/js/r20221110/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7458
x-xss-protection: 0
date: Fri, 25 Nov 2022 15:55:37 GMT
expires: Fri, 09 Dec 2022 15:55:37 GMT
cache-control: public, max-age=1209600
age: 1999
etag: 16870613375306414947
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
200 OK 9.4 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20221110/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1596)
Hash 6b277303de172776fc303dfc195982ef
fe6c6af5791742485ae21c4dc02edbee2b426886
c536ada7aa8f4679e0e4f0b99703aab79f6fe32659d777f9c01a7785aa06a36d
GET /pagead/js/r20221110/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 9428
x-xss-protection: 0
date: Fri, 25 Nov 2022 15:59:24 GMT
expires: Fri, 09 Dec 2022 15:59:24 GMT
cache-control: public, max-age=1209600
age: 1772
etag: 246362764157784863
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 25 Nov 2022 16:28:56 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: JVQ4CHVWK11JYMNA0HVP
Set-Cookie: ad-id=Az8HBQWz7UDDg9S7V52ITc8|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 16:28:56 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 3c2523cfbf08070355cb038bedfef4c0
7477773dcc5a72ce90250ad82cb68e389f944bfb
1593ef062a33a8f1411169fe7f2d86ea7a730e7eb1c4a85b90c19d76efe994b4
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118887
Date: Fri, 25 Nov 2022 16:28:56 GMT
Etag: "63800463-1d7"
Expires: Sun, 27 Nov 2022 01:30:23 GMT
Last-Modified: Thu, 24 Nov 2022 23:55:15 GMT
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0XfHSYBRW291IG-2QIizisMe9gvK3VZU8N2aM-34OmYd--h1etLfng==
Age: 5708
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 3c2523cfbf08070355cb038bedfef4c0
7477773dcc5a72ce90250ad82cb68e389f944bfb
1593ef062a33a8f1411169fe7f2d86ea7a730e7eb1c4a85b90c19d76efe994b4
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118887
Date: Fri, 25 Nov 2022 16:28:56 GMT
Etag: "63800463-1d7"
Expires: Sun, 27 Nov 2022 01:30:23 GMT
Last-Modified: Thu, 24 Nov 2022 23:55:15 GMT
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: twNBetQ3-lspWWFPyMY8fJk1OakFUiemcLd5U3nuAxYe7fWqvrbLYA==
Age: 5708
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-mediagrid_n-index_n-LoopMe_n-MediaNet_ox-db5_smrt_cnv_n-amobee_n-smaato_n-sharethrough_pm-db5_ym_rbd_n-emx&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 25 Nov 2022 16:28:56 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: YM5R94425YN0BGT8SPFA
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/mysidia/f7733d2b54a65c984752ab0a98c7def9.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/f7733d2b54a65c984752ab0a98c7def9.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1921)
Hash 48a3f12d2425ba123d53524adc123834
c8f4ecbe239261b944879c18ec1a353d0cc674ba
632e1fbd2bba00a95491c806cdf850014b1b617323f698c492272d917603e20b
GET /mysidia/f7733d2b54a65c984752ab0a98c7def9.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 14118
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 10:43:31 GMT
expires: Mon, 20 Feb 2023 10:43:31 GMT
cache-control: public, max-age=7776000
last-modified: Mon, 14 Nov 2022 13:59:16 GMT
content-type: text/javascript
age: 279925
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 16:28:56 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data
Hash 53b5e785dfdca21fa7adf7119fa1f8cc
a3a86dfd216ad29183ba5493ae39d45b62f9d8b8
4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 15:21:36 GMT
expires: Thu, 23 Nov 2023 15:21:36 GMT
cache-control: public, max-age=31536000
age: 176840
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml
200 OK 16 kB URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml
IP
Hash 5a5f888ce9cf4e3a454715aa376ba288
83af821da70a93aa45bfbde0fcb5e25822f8130a
f93caaa4c50c17816f11f2276cf7a5a3fc1696671692a57493c20c61a8d6b2de
GET /v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:56 GMT
content-type: application/json
server: nginx/1.20.0
cache-control: public,max-age=30
access-control-allow-origin: https://games.softpedia.com
access-control-allow-credentials: true
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
200 OK 1.3 kB URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
IP
Hash 979f6349e12f233be1391b846c5af97d
008fa151c7689f4220032d701d24ba38b291b8d0
c3000936be6d9a92835d2b44702f2c2da1a2b5720d3141ae1cfffbcaeb429620
GET /adsid/integrator.js?domain=games.softpedia.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:57 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4mrVcEvSub4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4mrVcEvSub4
IP
Hash 2196dfe60fb69fcd3fc794cd78314153
7b4b67b6ff5d725d4939654329d381cf6167ae84
871c00bbf2c0fe571a13a21d780de422bec6f63a5b319d5ae280c5e5655d86b8
POST /s/gts1d4/4mrVcEvSub4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
oa.openxcdn.net/esp.js
200 OK 7.9 kB IP
File type ASCII text, with very long lines (24615), with no line terminators
Hash df5542b88bc0e368c6999754a5b9e2ba
54f17142faeb7c882fee3bf67d537733e75e43ae
b82da9703a35c5436f9e47711f5b95d5357f02d590cb39dba99355b9b073561f
GET /esp.js HTTP/1.1
Host: oa.openxcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtXsihSIn-juE2xi3HCUfoDHbh2sjzJJEUjN58pMCUFSOHS-iOTo4e134B0mYgaxb9tRoVBHb7W7nQJhTwwSuHf5g
x-goog-generation: 1622140251693895
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7927
content-encoding: gzip
x-goog-hash: crc32c=f21hYg==, md5=31VCuIvA42jGmZdUpbniug==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 7927
server: UploadServer
date: Mon, 21 Nov 2022 15:39:13 GMT
expires: Tue, 21 Nov 2023 15:39:13 GMT
cache-control: no-transform
age: 348584
last-modified: Thu, 27 May 2021 18:30:51 GMT
etag: "df5542b88bc0e368c6999754a5b9e2ba"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/4mrVcEvSub4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/4mrVcEvSub4
IP
Hash 2196dfe60fb69fcd3fc794cd78314153
7b4b67b6ff5d725d4939654329d381cf6167ae84
871c00bbf2c0fe571a13a21d780de422bec6f63a5b319d5ae280c5e5655d86b8
POST /s/gts1d4/4mrVcEvSub4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=games.softpedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=games.softpedia.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:57 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_276.js
200 OK 38 kB URL HTTP/2 s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_276.js
IP
File type ASCII text, with very long lines (3095)
Hash 4f9b890a6c4cfbbfd0fb7eff98bf4dde
2db204fb0ee448842b40f84463234ea496763130
8e0d4c67a688228e1ba10b1e1dc367c078edf7e9bc35be0bd4ae8c0ce980647c
GET /879366/express_html_inpage_rendering_lib_200_276.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 37872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 03:09:16 GMT
expires: Sat, 26 Nov 2022 03:09:16 GMT
cache-control: public, max-age=86400
age: 47981
last-modified: Wed, 02 Mar 2022 23:07:26 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e425a9ede0696901f58184e88649dee0
1ddc63cb1d1ac429cf8c3e0b4bffc2a52506cb86
7a5e9f0b159142099153a810967b6a01bf5b82c4713a83781b4f6dba19f1236e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 16:28:57 GMT
Last-Modified: Fri, 25 Nov 2022 14:55:14 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YKvEJBy6YMlS14761clmGSAdeJURht2Wp2dxCa9Kicrn8FOsILcv3Q==
Age: 5623
id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml
200 OK 538 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml
IP
Hash a9c431e556be442f618113e79ca21150
1ad050137c0c7bf8a4e57af156392fb8bae46f1b
3a220ffbf8de5faa9ba138dec54274c3650550eff5bc14fc1a492bace46440e3
OPTIONS /v1/hadron.json?_it=amazon&partner_id=443&sync=0&domain=games.softpedia.com&url=https://games.softpedia.com/get/Cheat-Solutions/Wings-Remastered-Edition-5-Trainer.shtml HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://games.softpedia.com/
Origin: https://games.softpedia.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:56 GMT
content-type: application/json
server: nginx/1.20.0
cache-control: public,max-age=30
access-control-allow-origin: https://games.softpedia.com
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
sda.softpedia.com/xbk.php?sz=970x250
200 OK 0 B URL HTTP/1.1 sda.softpedia.com/xbk.php?sz=970x250
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbk.php?sz=970x250 HTTP/1.1
Host: sda.softpedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Cookie: __SP33K=fqlc8f624u2prk7l2ctvlovlibvgnof0; _ga=GA1.2.1016331848.1669393735; _gid=GA1.2.1634090516.1669393735; _gat=1; __gads=ID=8c463d53c89bdb5a-2254db0293d700c3:T=1669393735:S=ALNI_MbYGWMHGxxuaJsXbDQxNHQXFPP8Kg; __gpi=UID=00000b876638f1a5:T=1669393735:RT=1669393735:S=ALNI_MZzerLs7fTB3mdAKXOcdGi1AJXVCw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 16:28:57 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 0
Keep-Alive: timeout=3, max=10000
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
oajs.openx.net/esp?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rid=esp
200 OK 2 B URL HTTP/2 oajs.openx.net/esp?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rid=esp
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /esp?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rid=esp HTTP/1.1
Host: oajs.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: https://games.softpedia.com
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
content-length: 2
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
date: Fri, 25 Nov 2022 16:28:57 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvTLSOEbWHzzSKdFej4I8iRKMAfxFa133nEqlcRd8bKf9YOU78IXKOZt53IMKFBo2QZQGwVbxSA_lJyqT3UV9jXBAPiBbFfPaaZMLeMGt-YstfhatzgKw5psKV3ayeqPdC5MSRbgrOXmHkT7tyYbYCF7OmKbptDvn39bKmfrbddDmtheY5ac82TdUwAc9i9dnp6g6pwczO2RpfBmpO-yXFiB0dncuE24yqWhxzxgKBZhH9m8msNYBARWl0Y7XMmo8u6CfICXM0fWXnrA7zV7xbZEHDnAoAIADGDb9EG5hhkkBbsRlmUZjpY0h4cyvkbLpt_ZP1hc5HP0dh1ASSc7e8T0gVFSYJKs6ERK5-_HZJUSxR58YyYOhUVV4PdaJ670CM6ry3nOVG7nfIoCqqvOncyl5qeDl2QA1vRg4coWcrLMG64GU1ZWq9ZW1wVIVGjzIaa901LW5v522gUo8Y8C6oaU7He6CbvspXVoGiUe9Fx0AC3tRweYa3pRC-IiE7NA5N7rq2UiW1JZgdXpNXxYKaM2H_Yo7WVRxixPg1XjKK4llBzqIwK2iuHlzcZOdseSS7voKgFyymoLfnNqpVyTcPTjPbuQjjiuNjSV9bHCHlwrTeEgKbgorLJrdMyYpjmctMpO1AhQP5NOvkvALIxIKa4TsmlE3179rZd1DnOOnpEWKTanu3hYQklaO_GNEUjKByY5fipfQXVzUNThRM9G2f2CRvWHkkNUwvlfKvT_PGfIegMJtZOBY2D66csmlxFVjXmV0gvqcEQky1KV_s2tM8B1lm1jGR-NWTZ6Qvz5jK016tutpud2cn8w35NJkqRXZYlXU-O-sbxXTfpstWMge4DbWzWyF6XHL8FujxKUhqYIxfMoc28WwIrGGG8EgWFU6XCxUIYGHVv95FFgVfLK6uQrQdThGtPTjSLnDZib-AhS9_A2k9IRMvlowabJUz9NSo_0FlTA4sIhV94gPbCIQUOO_mBvrUKMbCsmlM3vjkfhKn6lXWK7oHtLtjEY-HL6wwkbWXPBtGmbm94NgKTS4ew8p_iSh5NNMaGhp9xMLqzFGd56cz4rJTA_UEgi4JKJsir-nNUtDxeIr0JSEN3iQX2SswlEwkuMrQ4sVm8WF_kEdYSxDPUDfBAEEvTEm524HxR0TMdrAFu3KuWFX_iGKSu5E5QrityoWza5yAq6j5qjEgHZAn32XTnWonxTKi4EEzZ0J5feOLmlkKPJcb8Vg7YQzb1OM9fUc0cKH0p0-XGIINn&sai=AMfl-YRyk7GbVepW6BJ_Kq7_Ws2oSaqfzNxVcN3h_xWLVW8RiPnwRvowyWqbnPYLqOYug_CB0KlEEGXGO9-2o3grdskjF4eobpFeyYQGe7ENfVImN28KeJyd2cyNnjTgWtcowfAKodU8sIlKHCS41E1AXm50EgmXFBTD5zwrLcGwmLX64j_9aMQ-9IKrao3BHsnsV-13fEcQOkWRl_VGdDdqtEE2omCHefJxgYdPKX1y9h3-cVfsOU7hmIW8tlgS-4H730sFWgd-OXlVtUIyz7il-soVzfW5QM5tmnnOut8at5nVHP-nviI&sig=Cg0ArKJSzAu38BrMmjT_EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=303&cbvp=1&cstd=299&cisv=r20221110.69218&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvTLSOEbWHzzSKdFej4I8iRKMAfxFa133nEqlcRd8bKf9YOU78IXKOZt53IMKFBo2QZQGwVbxSA_lJyqT3UV9jXBAPiBbFfPaaZMLeMGt-YstfhatzgKw5psKV3ayeqPdC5MSRbgrOXmHkT7tyYbYCF7OmKbptDvn39bKmfrbddDmtheY5ac82TdUwAc9i9dnp6g6pwczO2RpfBmpO-yXFiB0dncuE24yqWhxzxgKBZhH9m8msNYBARWl0Y7XMmo8u6CfICXM0fWXnrA7zV7xbZEHDnAoAIADGDb9EG5hhkkBbsRlmUZjpY0h4cyvkbLpt_ZP1hc5HP0dh1ASSc7e8T0gVFSYJKs6ERK5-_HZJUSxR58YyYOhUVV4PdaJ670CM6ry3nOVG7nfIoCqqvOncyl5qeDl2QA1vRg4coWcrLMG64GU1ZWq9ZW1wVIVGjzIaa901LW5v522gUo8Y8C6oaU7He6CbvspXVoGiUe9Fx0AC3tRweYa3pRC-IiE7NA5N7rq2UiW1JZgdXpNXxYKaM2H_Yo7WVRxixPg1XjKK4llBzqIwK2iuHlzcZOdseSS7voKgFyymoLfnNqpVyTcPTjPbuQjjiuNjSV9bHCHlwrTeEgKbgorLJrdMyYpjmctMpO1AhQP5NOvkvALIxIKa4TsmlE3179rZd1DnOOnpEWKTanu3hYQklaO_GNEUjKByY5fipfQXVzUNThRM9G2f2CRvWHkkNUwvlfKvT_PGfIegMJtZOBY2D66csmlxFVjXmV0gvqcEQky1KV_s2tM8B1lm1jGR-NWTZ6Qvz5jK016tutpud2cn8w35NJkqRXZYlXU-O-sbxXTfpstWMge4DbWzWyF6XHL8FujxKUhqYIxfMoc28WwIrGGG8EgWFU6XCxUIYGHVv95FFgVfLK6uQrQdThGtPTjSLnDZib-AhS9_A2k9IRMvlowabJUz9NSo_0FlTA4sIhV94gPbCIQUOO_mBvrUKMbCsmlM3vjkfhKn6lXWK7oHtLtjEY-HL6wwkbWXPBtGmbm94NgKTS4ew8p_iSh5NNMaGhp9xMLqzFGd56cz4rJTA_UEgi4JKJsir-nNUtDxeIr0JSEN3iQX2SswlEwkuMrQ4sVm8WF_kEdYSxDPUDfBAEEvTEm524HxR0TMdrAFu3KuWFX_iGKSu5E5QrityoWza5yAq6j5qjEgHZAn32XTnWonxTKi4EEzZ0J5feOLmlkKPJcb8Vg7YQzb1OM9fUc0cKH0p0-XGIINn&sai=AMfl-YRyk7GbVepW6BJ_Kq7_Ws2oSaqfzNxVcN3h_xWLVW8RiPnwRvowyWqbnPYLqOYug_CB0KlEEGXGO9-2o3grdskjF4eobpFeyYQGe7ENfVImN28KeJyd2cyNnjTgWtcowfAKodU8sIlKHCS41E1AXm50EgmXFBTD5zwrLcGwmLX64j_9aMQ-9IKrao3BHsnsV-13fEcQOkWRl_VGdDdqtEE2omCHefJxgYdPKX1y9h3-cVfsOU7hmIW8tlgS-4H730sFWgd-OXlVtUIyz7il-soVzfW5QM5tmnnOut8at5nVHP-nviI&sig=Cg0ArKJSzAu38BrMmjT_EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=303&cbvp=1&cstd=299&cisv=r20221110.69218&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvTLSOEbWHzzSKdFej4I8iRKMAfxFa133nEqlcRd8bKf9YOU78IXKOZt53IMKFBo2QZQGwVbxSA_lJyqT3UV9jXBAPiBbFfPaaZMLeMGt-YstfhatzgKw5psKV3ayeqPdC5MSRbgrOXmHkT7tyYbYCF7OmKbptDvn39bKmfrbddDmtheY5ac82TdUwAc9i9dnp6g6pwczO2RpfBmpO-yXFiB0dncuE24yqWhxzxgKBZhH9m8msNYBARWl0Y7XMmo8u6CfICXM0fWXnrA7zV7xbZEHDnAoAIADGDb9EG5hhkkBbsRlmUZjpY0h4cyvkbLpt_ZP1hc5HP0dh1ASSc7e8T0gVFSYJKs6ERK5-_HZJUSxR58YyYOhUVV4PdaJ670CM6ry3nOVG7nfIoCqqvOncyl5qeDl2QA1vRg4coWcrLMG64GU1ZWq9ZW1wVIVGjzIaa901LW5v522gUo8Y8C6oaU7He6CbvspXVoGiUe9Fx0AC3tRweYa3pRC-IiE7NA5N7rq2UiW1JZgdXpNXxYKaM2H_Yo7WVRxixPg1XjKK4llBzqIwK2iuHlzcZOdseSS7voKgFyymoLfnNqpVyTcPTjPbuQjjiuNjSV9bHCHlwrTeEgKbgorLJrdMyYpjmctMpO1AhQP5NOvkvALIxIKa4TsmlE3179rZd1DnOOnpEWKTanu3hYQklaO_GNEUjKByY5fipfQXVzUNThRM9G2f2CRvWHkkNUwvlfKvT_PGfIegMJtZOBY2D66csmlxFVjXmV0gvqcEQky1KV_s2tM8B1lm1jGR-NWTZ6Qvz5jK016tutpud2cn8w35NJkqRXZYlXU-O-sbxXTfpstWMge4DbWzWyF6XHL8FujxKUhqYIxfMoc28WwIrGGG8EgWFU6XCxUIYGHVv95FFgVfLK6uQrQdThGtPTjSLnDZib-AhS9_A2k9IRMvlowabJUz9NSo_0FlTA4sIhV94gPbCIQUOO_mBvrUKMbCsmlM3vjkfhKn6lXWK7oHtLtjEY-HL6wwkbWXPBtGmbm94NgKTS4ew8p_iSh5NNMaGhp9xMLqzFGd56cz4rJTA_UEgi4JKJsir-nNUtDxeIr0JSEN3iQX2SswlEwkuMrQ4sVm8WF_kEdYSxDPUDfBAEEvTEm524HxR0TMdrAFu3KuWFX_iGKSu5E5QrityoWza5yAq6j5qjEgHZAn32XTnWonxTKi4EEzZ0J5feOLmlkKPJcb8Vg7YQzb1OM9fUc0cKH0p0-XGIINn&sai=AMfl-YRyk7GbVepW6BJ_Kq7_Ws2oSaqfzNxVcN3h_xWLVW8RiPnwRvowyWqbnPYLqOYug_CB0KlEEGXGO9-2o3grdskjF4eobpFeyYQGe7ENfVImN28KeJyd2cyNnjTgWtcowfAKodU8sIlKHCS41E1AXm50EgmXFBTD5zwrLcGwmLX64j_9aMQ-9IKrao3BHsnsV-13fEcQOkWRl_VGdDdqtEE2omCHefJxgYdPKX1y9h3-cVfsOU7hmIW8tlgS-4H730sFWgd-OXlVtUIyz7il-soVzfW5QM5tmnnOut8at5nVHP-nviI&sig=Cg0ArKJSzAu38BrMmjT_EAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=303&cbvp=1&cstd=299&cisv=r20221110.69218&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 16:28:57 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 16:43:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 25 Nov 2022 16:28:57 GMT
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 16:28:57 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 16:43:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 25 Nov 2022 16:28:57 GMT
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash a2f956982b060f795474e0e6a8fa2c19
c7bc0d64700cd7c9a66ced038ec82169225672b8
af04a6290fc8fad38db7165d09f829ce52e0b3e453537a27a7a502ea38fcb9d4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5273
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Last-Modified: Fri, 25 Nov 2022 15:01:04 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=489&vt=11&dtpt=488&dett=2&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=489&vt=11&dtpt=488&dett=2&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsuOULorJNU_sPnY37eNIsmsNVEFtqd0jO_uzht-XvA3nlwayG-1JzFeej5DnwB01ddTZnIncJs2wrXnCdsU-2hO59sJg6GsVaKPb07MZpKG4q0_r4RpFsPfgb_9nuw7suavMCZ6lbIMpV73q90ocAfoCxNhJFv6RtqvF4vBwY3GzU2zou9F1bbzV8d298PMMG3tm5FFF7SMRRUKRxhf41D2Ve9fL6IN8cbtJfQUoqeaU_aibuE_-klAbw6wkskrR5A1FR1q_pkg6eaFsILD2-FdcPrmDaZVoozEZGnvF0pI3AO24n8u0S23wDPCLzWUUhg9VZR-SqEK0pOOIghqawnbeCv-XjkYWEv2oDA19vEhRm8e-5E53T-wOPfI-YEXAOpFnwbxaTg5EszeUqYA2tsvJg1O8Ola_cm7Syq-uXeMRkNVpEaJtz12gqEuSC_jHPkG-SsKnEGdAQ0gMc349cX_pszpuaS_kPVhW41OLYEn1wNB7eLRh_u9lWFkc0cSDzMJeVoFzIYxOSoztOTuq6bnoZ3-0w2gJX12lLufOCTW2Czj49lhtc8KRs18pvGCyi3lUDQ5lBXNA7qJtFI20bsFpWIz9AQOibjSTLp_GOExW99ACdqH91w28gRClIgEBjA6JK9MA-MrnJIq08zpNxyequ0COIrypd3dC1YkiR-WSldDPEU0UjrRz0UvH3Ov3FPfbkAw-Ccaq9PAPWx8IsWmD6XWeMtr7smxUph4cEb38tQl9HIC-hBgG2uQPcEVf77CVfxDXAQVqgM-TjmGNNZdShdPzDl-_N5qfH8YdWPQt9w0soH-mkAuV4goBpiF9xa7YHLfsZSgCgZJHnihclaGiQDhxj_6P4ZuH7tHUMI7kT1lJ7bYa1i2o4kb7O2b7qGhYTCCD7Kp63WG_Oo3DMGLkcj4Ff8ScDfNd59Zo5qzZz5S5jyXsPVE5HQ27D_05Pk-K66OEUWegyk2oRixfp_-7pZxDsNtIF-5x10Wf8ilniuXRYp1B9p9c8z0xn2GH8Bm66MoXKEj2Xnf2ZiQUvIxurkFelHhG1IMvT_uLMJ8bb5SXLFixvKDOn3Yh9Byi5UAYxM9BNJRgbHD79JMGj46rL02K2ujLjQ5fHwsWwv5ZicJll3snoN1y_bt5xMbUoYXItZfpDKI1VsWrs_hnHzWoFAO3LEjQK8axmQnYBCGTYDRLF35KqXOJWC_Ws0IT5xJI1NKm24&sai=AMfl-YQDPcMMz3rFTtl-ZmqedYTQkl_0M5lG5LtYpcYss-RoPv8A0n_k2vKGfxC5drYUQYdwtQcjxAFc0XXHQ5w9HjG0aXCSLELoPfyQ5zucyh9hu3PvBHvKM-2cNp-_-RAcflCLcFcdpLoFPbHjFi1gjd2L5tzRlCgCctvhhl8mfRMFRlgYs11bHqvr65hjhIv7Gt4GxuEzOgR57lSK3An7wRgd1rWXaHX4_BaEsB9WFcVEB12AaRNcR9okUIwdrVy4LJp_3mLL1OWpC_BGsSmO6xFRzKkFpxmNN1k3c81_OxnTHBRNb38&sig=Cg0ArKJSzNeHXK1a2meFEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=489&vt=11&dtpt=488&dett=2&cstd=0&cisv=r20221110.23508&arae=0&ftch=1&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7a1d02d021b79b1690ea9129c730f6fc.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 16:28:57 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 16:43:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 25 Nov 2022 16:28:57 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 75951034770b8bae27ac4790b2b61a2e
545da3faf8225390f15ac9d5839ceebc63f58f43
3b5e9dc36f3d2e3b88b6a1305c6a32d535bc0006381d421a483825a74a3ab092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 206
Cache-Control: max-age=157254
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:57 GMT
Etag: "6380afc1-118"
Expires: Sun, 27 Nov 2022 12:09:51 GMT
Last-Modified: Fri, 25 Nov 2022 12:06:25 GMT
Server: ECS (amb/6B74)
X-Cache: HIT
Content-Length: 280
google-bidout-d.openx.net/w/1.0/pd?plm=5
200 OK 20 B URL HTTP/2 google-bidout-d.openx.net/w/1.0/pd?plm=5
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /w/1.0/pd?plm=5 HTTP/1.1
Host: google-bidout-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
date: Fri, 25 Nov 2022 16:28:57 GMT
content-type: text/html
content-length: 20
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 14 kB URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
Hash 65e5bec17e67ea5a021f1daf7812ca4b
b9af9518185a7f2375a9135be5d2509cd084d7d9
bc65de554ef25a6d4fc910b384e90987678af297b8f90662c170b3fb97c30951
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 18 Nov 2022 03:05:15 GMT
x-amz-version-id: vkCJAv2LVCiDvkjoOZrS5s9fefeFFUOq
server: AmazonS3
content-encoding: gzip
date: Fri, 25 Nov 2022 16:28:56 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fu_Wqxjv6tKOh19wE1S6fyIwgsMliP06mcC07nBXrjddCgNeA6lEqA==
age: 42825
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4434
Cache-Control: max-age=137033
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:58 GMT
Etag: "63805041-1d7"
Expires: Sun, 27 Nov 2022 06:32:51 GMT
Last-Modified: Fri, 25 Nov 2022 05:18:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash 8efc2dc3bc942ae770bfbab16da5aa89
0e257088f546f76e961402a693cd025385cab844
2d8ec474661cde57d3a839eabd567a49c63c87c594be63e2b2178d596f62f4ac
GET /api/v1/g_hosted?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTM5MzczNy1CSU9CNUlKNi1JWkJY
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b0c217b1666dcd4822e5c64ad74f3035
13588c3ea23c48a45a3c47c10599173b785e464e
088e98051700d409704a0d4b30257ab01ef27db839a8e1413e2f78ebe300dc4a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6463
Cache-Control: max-age=154525
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:58 GMT
Etag: "63808ca8-1d7"
Expires: Sun, 27 Nov 2022 11:24:23 GMT
Last-Modified: Fri, 25 Nov 2022 09:36:40 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: jOsSknBgxQpdXHyKa7aTeBkDwB0wdf/JhNm+icnzCWURDoBdajNvtU2NrAXW4rEYBGfNmO71o1j14Fj61DnAeA==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 25 Nov 2022 16:28:58 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7132a3830c6ed8ae0146e462b48350e9
63d0832a07c566e1b1bdb4445c48feca6c7bee5c
27bbfeccaea121793a2d9fa74431c33ff1dedf26ab0c9719dcc66bb880091793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4256
Cache-Control: max-age=109858
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:58 GMT
Etag: "637fe6cc-1d7"
Expires: Sat, 26 Nov 2022 22:59:56 GMT
Last-Modified: Thu, 24 Nov 2022 21:49:00 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash a5fe64b956bd6f8a7df1655e4db09139
eb4ad2627766176a01ac6d0f52d329e52843f969
43bf017d158f44cfbf891aa7bf21184cec71da75825f388da0827d6a4d3b18c7
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 29 Nov 2022 12:59:27 GMT
ETag: "eb4ad2627766176a01ac6d0f52d329e52843f969"
Last-Modified: Fri, 25 Nov 2022 12:59:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1329
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fbc2b22889b509-OSL
secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=$UID&gdpr=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=$UID&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=$UID&gdpr=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26adnxs_id%3D%24UID%26gdpr%3D0
AN-X-Request-Uuid: 6d2abf29-2b91-4485-8946-d89d8772713d
Set-Cookie: uuid2=5711855471531973706; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 23-Feb-2023 16:28:58 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4434
Cache-Control: max-age=137033
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:58 GMT
Etag: "63805041-1d7"
Expires: Sun, 27 Nov 2022 06:32:51 GMT
Last-Modified: Fri, 25 Nov 2022 05:18:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
sync.mathtag.com/sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 169 32252b7 master zrh-pixel-x14 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=98db6380-ed4b-4500-bb60-71f5d0524798; domain=.mathtag.com; path=/; expires=Sat, 23-Dec-2023 16:28:59 GMT; SameSite=None; Secure
location: https://ids.ad.gt/api/v1/mediamath_match?user_id=98db6380-ed4b-4500-bb60-71f5d0524798&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
Expires: Fri, 25 Nov 2022 16:28:57 GMT
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669393737-BIOB5IJ6-IZBX&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669393737-BIOB5IJ6-IZBX&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669393737-BIOB5IJ6-IZBX&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7a61052c1a514fc387974ff77dd7bf21
ab24f1bc006719c59dc000555cff69ff74baf15f
d185113770dde72560bb760702c67a47fb623be6ca33bef7c6f2fa58dda4835e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120688
Date: Fri, 25 Nov 2022 16:28:58 GMT
Etag: "63800e39-1d7"
Expires: Sun, 27 Nov 2022 02:00:26 GMT
Last-Modified: Fri, 25 Nov 2022 00:37:13 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R8R2owj4RzEwQTW1R1gRb9-bNj6ZD0vwIX2G0oPwy02U1kO5nWnP3Q==
Age: 4993
ocsp.digicert.com/
200 OK 471 B IP
Hash 6bb8e0c078e9f3cd214208ef29de3988
ec75b5e7ed32b69066267d7ed34334afd82e256b
284b2d4dd1256796baa65597ab24bd14183f4b633e59bbc55414fe9efb93b422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3130
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 16:28:58 GMT
Last-Modified: Fri, 25 Nov 2022 15:36:48 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D
302 Found 0 B URL HTTP/2 ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D
set-cookie: tuuid=2280588f-70d2-4de8-9026-fb9c58e3fedc; Expires=Thu, 23 Feb 2023 16:28:58 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1669393738; Expires=Thu, 23 Feb 2023 16:28:58 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
pixels.ad.gt/api/v1/getpixels?tagger_id=891a4377013dd7f5b9daf9e7c007740f&url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&code=%27none%27
204 No Content 0 B URL HTTP/2 pixels.ad.gt/api/v1/getpixels?tagger_id=891a4377013dd7f5b9daf9e7c007740f&url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&code=%27none%27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/getpixels?tagger_id=891a4377013dd7f5b9daf9e7c007740f&url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&code=%27none%27 HTTP/1.1
Host: pixels.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 16:28:58 GMT
server: nginx/1.20.0
X-Firefox-Spdy: h2
a.ad.gt/api/v1/collect
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/collect HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 1544
Origin: https://games.softpedia.com
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 16:28:58 GMT
server: nginx/1.20.0
access-control-allow-origin: https://games.softpedia.com
vary: Origin
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/halo_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&halo_id=0606ki76edgclakaj8l66j78k86lgh8hlgg0yu20mkqi0eyew4000w24y400qs4s0
200 OK 515 B URL HTTP/2 ids.ad.gt/api/v1/halo_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&halo_id=0606ki76edgclakaj8l66j78k86lgh8hlgg0yu20mkqi0eyew4000w24y400qs4s0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash f2824d5124fb609fd5d40a6ad625e11a
20b9973c286af20076bd64b635a5ffb82521be58
28657d2eca7990ff08f30f4f005c7085276aee67ad197d7b6f2843324decc792
GET /api/v1/halo_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&halo_id=0606ki76edgclakaj8l66j78k86lgh8hlgg0yu20mkqi0eyew4000w24y400qs4s0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: 014c63b9-363b-44d9-b010-37c7a30a14bb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26impr_uid%3D%7BPUB_USER_ID%7D HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9f7171599ce3f9872cb3d090490d72fa
970747ca2a5c2fe8b682c2992b6c211da6480240
2cf2b91c9f5cce515b5b8007f0a5ea82fe8f359e1c7c2add97f2cd5a66051a9b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 24 Nov 2022 19:15:59 GMT
Expires: Fri, 25 Nov 2022 19:15:59 GMT
ETag: "970747ca2a5c2fe8b682c2992b6c211da6480240"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=[UID]&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=[UID]&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=[UID]&gdpr=0 HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 25 Nov 2022 16:28:58 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-87
X-Xss-Protection: 0
Location: https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=8fa5ca12-5ae0-40f8-9f5b-dc2fb8bd6b36&gdpr=0
Server: sonobi-go
Set-Cookie: __uis=8fa5ca12-5ae0-40f8-9f5b-dc2fb8bd6b36; expires=Sun, 25 Dec 2022 16:28:58 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s8587|Y4DtT; path=/; domain=.go.sonobi.com; SameSite=None; secure
www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rl=&if=false&ts=1669393738266&cd[partner_id]=443&cd[tagger_id]=891a4377013dd7f5b9daf9e7c007740f&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669393738265.285885755&it=1669393738007&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rl=&if=false&ts=1669393738266&cd[partner_id]=443&cd[tagger_id]=891a4377013dd7f5b9daf9e7c007740f&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669393738265.285885755&it=1669393738007&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&rl=&if=false&ts=1669393738266&cd[partner_id]=443&cd[tagger_id]=891a4377013dd7f5b9daf9e7c007740f&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669393738265.285885755&it=1669393738007&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 16:28:58 GMT
X-Firefox-Spdy: h2
sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D&cb=1669393738791
302 Found 4.1 kB URL HTTP/2 sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D&cb=1669393738791
IP
File type gzip compressed data, max compression\012- data
Hash 80fbf96872e868af5f861ca4de459f1f
153a1de7a30f0954548c0472d0d2520d0c21a0f2
bde0c7573bd842638f62e296d16fc1af1a15880376de1604396da448c6f8e829
GET /usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D&cb=1669393738791 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://ids.ad.gt/api/v1/unruly?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&unruly_id=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&google_error=3
200 OK 43 B URL HTTP/2 ids.ad.gt/api/v1/g_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /api/v1/g_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/unruly?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&unruly_id=OPTOUT
202 Accepted 910 B URL HTTP/2 ids.ad.gt/api/v1/unruly?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&unruly_id=OPTOUT
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d609bb1a95b67d95372f0a2b85eb3e9f
7e8868e5ae2e756c39904bc5198b13ed3e3b5fbf
9100a2f1726603e1f359f403f0ac122c1f761b0acfeeee4c2b8dd3423a3e5830
GET /api/v1/unruly?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&unruly_id=OPTOUT HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&ref=&_it=amazon&partner_id=443
200 OK 0 B URL HTTP/2 cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&ref=&_it=amazon&partner_id=443
IP
GET /hadron.js?url=https%3A%2F%2Fgames.softpedia.com%2Fget%2FCheat-Solutions%2FWings-Remastered-Edition-5-Trainer.shtml%23download&ref=&_it=amazon&partner_id=443 HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:56 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"2280e2148e4ee3c06f679f8fac039778"
last-modified: Fri, 18 Nov 2022 10:57:44 GMT
x-amz-id-2: AlHhfnaYFu7DcAqm/AZXcFZz8Z4At5Hcn9XqhUxeA24L5T6B/l+VTePOXZCvBx0dhJEtzYQ2PVA=
x-amz-request-id: FNK044PCM9Y7VVCR
cache-control: max-age=3600
cf-cache-status: HIT
age: 5377
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mt%2F1YmMcvHNm7ccrVMzdPTr5uTH4mOImhgJCrQmbBoCG42JPlUAXgu%2Ft7%2B40ncrfq1AdxlPkAA1y4MYMP36ET9%2FtRiH8ygltt4TJe5RRIwX931rjYFfGp1KBZ0NBSUOMn6s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76fbc2a2ec54b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
302 Found 0 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-6794d6fb46-6qn4k
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://ids.ad.gt/api/v1/ppnt_match?uid=2VpittU2r1wK&ev=1&pid=562316&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
set-cookie: V=2VpittU2r1wK;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 20-Nov-2023 16:28:58 GMT;Max-Age=31104000;SameSite=None
INGRESSCOOKIE=0bbbf30dabfb81a1; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ppnt_match?uid=2VpittU2r1wK&ev=1&pid=562316&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ppnt_match?uid=2VpittU2r1wK&ev=1&pid=562316&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
GET /api/v1/ppnt_match?uid=2VpittU2r1wK&ev=1&pid=562316&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
302 Found 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 25 Nov 2022 16:28:58 GMT
set-cookie: KTPCACOOKIE=true; domain=pubmatic.com; secure; expires=Thu, 23-Feb-2023 16:28:58 GMT; path=/
location: https://image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/443?_it=amazon
200 OK 0 B URL HTTP/2 a.ad.gt/api/v1/u/matches/443?_it=amazon
IP
GET /api/v1/u/matches/443?_it=amazon HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:57 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
d3div1mtym39ic.cloudfront.net/aax2/apstag.js
200 OK 0 B URL HTTP/2 d3div1mtym39ic.cloudfront.net/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: d3div1mtym39ic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 09 Nov 2022 20:51:49 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 25 Nov 2022 16:01:03 GMT
cache-control: public, max-age=3600
etag: W/"fa24fe2b94a2fc864b1ec67f32e8db32"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MAeoX0vm-Ann8D1zg1ZVOKRdNqlUnoXelcI17cRMn4i04i2iqiKe_A==
age: 1673
X-Firefox-Spdy: h2
p.ad.gt/api/v1/p/443
200 OK 0 B IP
GET /api/v1/p/443 HTTP/1.1
Host: p.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:57 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 10:28:20 GMT
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:26:43 GMT
etag: W/"1669285700.0-40653-3373272138"
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 134
vary: Accept-Encoding
server: cloudflare
cf-ray: 76fbc2aded3bfab4-OSL
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
200 OK 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
GET /AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D
IP
GET /usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://games.softpedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-c84717f5-3348-440c-8b42-c6abe4c8e0f8-003%22%7D; path=/; expires=Sat, 25 Nov 2023 16:28:58 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669393737-BIOB5IJ6-IZBX%26unruly_id%3D%5BRX_UUID%5D&cb=1669393738791
etag: RXc84717f53348440c8b42c6abe4c8e0f8003
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/mediamath_match?user_id=98db6380-ed4b-4500-bb60-71f5d0524798&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/mediamath_match?user_id=98db6380-ed4b-4500-bb60-71f5d0524798&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX
IP
GET /api/v1/mediamath_match?user_id=98db6380-ed4b-4500-bb60-71f5d0524798&id=AU1D-0100-001669393737-BIOB5IJ6-IZBX HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=0&gdpr=0
202 Accepted 0 B URL HTTP/2 ids.ad.gt/api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=0&gdpr=0
IP
GET /api/v1/match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&adnxs_id=0&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?google_error=3
IP
GET /api/v1/g_match?google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:58 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:58 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=8fa5ca12-5ae0-40f8-9f5b-dc2fb8bd6b36&gdpr=0
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=8fa5ca12-5ae0-40f8-9f5b-dc2fb8bd6b36&gdpr=0
IP
GET /api/v1/son_match?id=AU1D-0100-001669393737-BIOB5IJ6-IZBX&uid=8fa5ca12-5ae0-40f8-9f5b-dc2fb8bd6b36&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://games.softpedia.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 16:28:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 26 Nov 2022 04:28:59 GMT
set-cookie: au_id=AU1D-0100-001669393737-BIOB5IJ6-IZBX; Expires=Sun, 24 Nov 2024 16:28:59 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C700
IP
GET /css?family=Google%20Sans%3A400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 16:28:56 GMT
date: Fri, 25 Nov 2022 16:28:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
5.35.211.214
3.121.210.180
142.250.74.3
93.184.220.29
23.46.116.133
104.18.20.226
23.36.77.32
157.240.200.35
52.95.126.160