urlquery - report: za.continuetoplay.com/5mxi0

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-13 17:12:29 UTC	34.117.237.239
track.fkg.tv (9)	0	2016-10-05 14:44:06 UTC	2023-01-14 06:58:07 UTC	80.74.141.5	Unknown ranking
firefox.settings.services.mozilla.com (3)	867	2020-05-25 20:06:39 UTC	2023-01-13 17:12:37 UTC	35.241.9.150
za.continuetoplay.com (3)	0	2022-06-02 19:35:46 UTC	2023-01-13 20:12:46 UTC	143.204.55.96	Domain (continuetoplay.com) ranked at: 775414
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-13 17:34:52 UTC	34.120.237.76
ocsp.pki.goog (8)	175	2017-06-14 07:23:31 UTC	2023-01-13 17:12:02 UTC	142.250.74.131
api.basebone.com (1)	756673	2013-04-18 12:15:14 UTC	2023-01-12 23:22:07 UTC	80.74.141.5
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-13 17:21:06 UTC	34.160.144.191
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2023-01-13 19:54:06 UTC	93.184.220.29
www.googleoptimize.com (1)	1604	2019-07-16 10:17:19 UTC	2023-01-13 20:55:54 UTC	142.250.74.78
www.google.no (1)	25607	2012-06-26 23:22:08 UTC	2023-01-13 20:23:54 UTC	142.250.74.163
region1.analytics.google.com (1)	0	2022-03-17 11:26:33 UTC	2023-01-13 18:20:52 UTC	216.239.32.36	Domain (google.com) ranked at: 1
r3.o.lencr.org (8)	344	2020-12-02 08:52:13 UTC	2023-01-13 17:12:05 UTC	23.36.76.226
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-13 17:41:06 UTC	44.228.1.109
my.rtmark.net (3)	9054	2015-02-04 09:54:57 UTC	2023-01-13 17:16:51 UTC	139.45.195.8
www.googletagmanager.com (1)	75	2012-10-04 01:07:32 UTC	2023-01-13 22:14:31 UTC	142.250.74.168
basebonecdn.com (1)	0	2018-05-03 17:05:33 UTC	2023-01-12 23:22:19 UTC	172.67.190.201	Unknown ranking
stats.g.doubleclick.net (1)	96	2012-07-01 17:13:23 UTC	2023-01-13 20:47:59 UTC	173.194.222.155

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-14 19:08:28 UTC	3	80.74.141.5	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
2023-01-14 19:08:28 UTC	3	80.74.141.5	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
2023-01-14 19:08:28 UTC	3	80.74.141.5	Client IP	ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
2023-01-14 19:08:28 UTC	1	Client IP	80.74.141.5	ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted

Scan Date	Severity	Indicator	Comment
2023-01-14	2	za.continuetoplay.com/5mxi0	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-29 17:25:58 +0000	0 - 0 - 2	mx.technolutions.net/ss/c/7Byna_zJWzbUKCnhLM- (...)	143.204.55.72
2023-03-08 13:21:36 +0000	0 - 2 - 0	downloads.derbystars.com/windows/derbystars-0 (...)	143.204.55.72
2023-03-05 21:33:29 +0000	0 - 8 - 0	ssnp.co.jp/	143.204.55.72
2023-02-25 00:29:58 +0000	0 - 2 - 0	cdn-download.kolor.com/ked/1.6.2.400_2016-03- (...)	143.204.55.72
2023-01-14 19:08:39 +0000	0 - 4 - 1	za.continuetoplay.com/5mxi0	143.204.55.72

Date	UQ / IDS / BL	URL	IP
2023-03-31 08:41:10 +0000	0 - 0 - 1	tracking.paketposten.com/news-16-06-22.zip	13.215.82.231
2023-03-31 08:31:58 +0000	0 - 3 - 1	collsoft-payroll-downloads.s3-eu-west-1.amazo (...)	52.218.109.8
2023-03-31 08:31:30 +0000	0 - 2 - 2	www.stockfootageonline.com/website.php?url=fa (...)	54.194.44.236
2023-03-31 08:30:17 +0000	0 - 1 - 0	tool.cyberon.com.tw/DSMT_V2/file/setup_Cybero (...)	54.248.249.154
2023-03-31 08:29:45 +0000	0 - 2 - 0	dl.acdsystems.com/luxea/fr/luxea-video-editor (...)	143.204.55.3

Date	UQ / IDS / BL	URL	IP
2023-03-27 17:11:17 +0000	0 - 11 - 0	za.continuetoplay.com/5mxi0	54.230.111.19
2023-03-26 12:06:55 +0000	0 - 7 - 0	za.continuetoplay.com/5mxi0/w/2149803/	54.230.111.8
2023-03-12 23:03:58 +0000	0 - 7 - 1	za.continuetoplay.com/5mxi0/w/2149803/	143.204.55.26
2023-03-06 18:59:47 +0000	0 - 0 - 1	za.continuetoplay.com/5mxi0/w/2149020/	143.204.55.26
2023-02-23 20:46:04 +0000	0 - 7 - 2	za.continuetoplay.com/7pcz8/w/2149986	54.230.111.19

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C" Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13385 Expires: Sat, 14 Jan 2023 22:51:32 GMT Date: Sat, 14 Jan 2023 19:08:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a8b4f1afb0e830b797238d34ab9254aa Sha1: e011acef3d05c959a65205d53b651ecd18a889fe Sha256: f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F" Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13613 Expires: Sat, 14 Jan 2023 22:55:20 GMT Date: Sat, 14 Jan 2023 19:08:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 0643dc6b6fed33b3537160b6bb77bcbf Sha1: aa43bd1fbb30d2219f3285c1ee4991ffb33562c5 Sha256: f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 14 Jan 2023 18:48:55 GMT age: 1172 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: ff250d3ef3fa45322bf05039a0122a9f Sha1: b3e7a2c383bce1bab807dbe1a03c375258b51f1d Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD" Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8111 Expires: Sat, 14 Jan 2023 21:23:38 GMT Date: Sat, 14 Jan 2023 19:08:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f7bd85a261739c122eefb74ffddaec99 Sha1: e2e059b0740592e8591d432249aafe5fcb8af23c Sha256: 71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
GET /5mxi0 HTTP/1.1 Host: za.continuetoplay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: za.continuetoplay.com/5mxi0 FQDN: za.continuetoplay.com IP: 143.204.55.96 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 143.204.55.96 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Date: Sat, 14 Jan 2023 19:08:27 GMT Server: Apache Location: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:27 GMT; Max-Age=604800; path=/ LPSID=CB7; path=/ X-Cache: Miss from cloudfront Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: NxEOjOnxCV4sRdS7QSqv63BYADNUMpM_uWwtNLheX7trdtuksqzoTg== --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Phishing
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: 6sE9ez6CXibxiIg8bOcQATfQ4JXS+VSl+RZCONhypRM4FW8Vsb4ZqCeXQz2U8RsGBPkIC07bHewto3PL+X34BQ== x-amz-request-id: 91J7DNFCCXP49H03 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 14 Jan 2023 18:55:03 GMT age: 804 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 14 Jan 2023 19:08:27 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl= (...) FQDN: track.fkg.tv IP: 80.74.141.5 HASH: 091330a4e0656c44a73bdeb4da804612de459066c880c755981ad86c426650bc 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 7301 Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ LPSID=CB4; path=/ Cache-control: private --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (23109) Size: 7301 Md5: e3cc45dd8a3e3c7866934982d759781a Sha1: 67fadb224c2c0be22bb673b706ed12b8260d6e6d Sha256: 091330a4e0656c44a73bdeb4da804612de459066c880c755981ad86c426650bc Alerts: IDS: - ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 - ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 - ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /ui/etag HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4	URL: track.fkg.tv/ui/etag FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ Content-Length: 0 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ui/cache HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4	URL: track.fkg.tv/ui/cache FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ Content-Length: 0 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ui/auth HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4	URL: track.fkg.tv/ui/auth FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ Content-Length: 0 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: IDS: - ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 14 Jan 2023 18:33:45 GMT age: 2083 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /favicon.ico HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4	URL: track.fkg.tv/favicon.ico FQDN: track.fkg.tv IP: 80.74.141.5 HASH: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e 80.74.141.5 HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Last-Modified: Tue, 13 Dec 2022 16:15:06 GMT ETag: "57e-5efb7ec4cd30e" Accept-Ranges: bytes Content-Length: 1406 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16\012- data Size: 1406 Md5: 011201ab56695ce86ea2f190bce2670b Sha1: bb8fad6accf293e619360935047c23f00da3c769 Sha256: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e
GET /ui/etag HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate X-BXP-CID: d981541a57f0837463f0a2ab157fea1e Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e	URL: track.fkg.tv/ui/etag FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ ETag: "d981541a57f0837463f0a2ab157fea1e" Transfer-Encoding: chunked Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 51 Md5: b2e0c5df3e75511e51ee05bc6c77850c Sha1: b3161ff195c77ccfc733cd1ddbe700e571ffb86d Sha256: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d
GET /ui/auth HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Authorization: Basic ZDk4MTU0MWE1N2YwODM3NDYzZjBhMmFiMTU3ZmVhMWU6bm9wYXNz Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e	URL: track.fkg.tv/ui/auth FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ WWW-Authenticate: Basic realm="My Realm" Last-Modified: Wed, 30 Jun 2010 21:36:48 GMT Expires: Tue, 31 Dec 2030 23:30:45 GMT Cache-Control: public, max-age=630720000 Transfer-Encoding: chunked Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 51 Md5: b2e0c5df3e75511e51ee05bc6c77850c Sha1: b3161ff195c77ccfc733cd1ddbe700e571ffb86d Sha256: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d Alerts: IDS: - ET POLICY Outgoing Basic Auth Base64 HTTP Password detected unencrypted
GET /ui/cache HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate X-BXP-CID: d981541a57f0837463f0a2ab157fea1e Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e	URL: track.fkg.tv/ui/cache FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ Last-Modified: Wed, 30 Jun 2010 21:36:48 GMT Expires: Tue, 31 Dec 2030 23:30:45 GMT Cache-Control: public, max-age=630720000 Transfer-Encoding: chunked Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 51 Md5: b2e0c5df3e75511e51ee05bc6c77850c Sha1: b3161ff195c77ccfc733cd1ddbe700e571ffb86d Sha256: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d
POST /ui/rcx HTTP/1.1 Host: track.fkg.tv User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/json Content-Length: 77 Origin: http://track.fkg.tv Connection: keep-alive Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e	URL: track.fkg.tv/ui/rcx FQDN: track.fkg.tv IP: 80.74.141.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:28 GMT Server: Apache Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ Content-Length: 0 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 847 Cache-Control: 'max-age=158059' Date: Sat, 14 Jan 2023 19:08:28 GMT Last-Modified: Sat, 14 Jan 2023 18:54:21 GMT Server: ECS (ska/F70C) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: c01ec61f7ca77158f474b3ab519c12fa Sha1: fc82ae0fcd73a83a980b75709a08e65239894e4a Sha256: f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 7Ywbk4EYqgQP+T+zaa6q6g== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.228.1.109 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.228.1.109 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: i6/+7XFKV11P4mQ3gbeBAZHYI8o= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221673708231037%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: firefox.settings.services.mozilla.com/v1/buckets/monito (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: cc358088dca45facdce8e873e11bb0529db41f5478da710c99f2b71b5c606e86 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 20973 via: 1.1 google date: Sat, 14 Jan 2023 19:01:57 GMT age: 392 last-modified: Sat, 14 Jan 2023 14:57:11 GMT cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (20973), with no line terminators Size: 20973 Md5: 94d1c1f63e4ed19055437cf2336dc4a8 Sha1: ca3d5abe3b0dfea265c7ac67a52e0761da3ef820 Sha256: cc358088dca45facdce8e873e11bb0529db41f5478da710c99f2b71b5c606e86
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11708 Expires: Sat, 14 Jan 2023 22:23:38 GMT Date: Sat, 14 Jan 2023 19:08:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 256e39696ba05f2324bbc49b2a396115 Sha1: e1cf8b15abd0a20eb1218be517c03459514a59e0 Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11708 Expires: Sat, 14 Jan 2023 22:23:38 GMT Date: Sat, 14 Jan 2023 19:08:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 256e39696ba05f2324bbc49b2a396115 Sha1: e1cf8b15abd0a20eb1218be517c03459514a59e0 Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11708 Expires: Sat, 14 Jan 2023 22:23:38 GMT Date: Sat, 14 Jan 2023 19:08:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 256e39696ba05f2324bbc49b2a396115 Sha1: e1cf8b15abd0a20eb1218be517c03459514a59e0 Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11708 Expires: Sat, 14 Jan 2023 22:23:38 GMT Date: Sat, 14 Jan 2023 19:08:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 256e39696ba05f2324bbc49b2a396115 Sha1: e1cf8b15abd0a20eb1218be517c03459514a59e0 Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8181 x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: es0paH-OIAMFg5A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0 x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw== via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 10:27:20 GMT age: 31270 etag: "dade37148c9b9a941f93a8535d8ddc5de3952623" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8181 Md5: d24ea1f095f492934a1f1c63f5d8590c Sha1: dade37148c9b9a941f93a8535d8ddc5de3952623 Sha256: 2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9539 x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: epfDqEAZIAMFudQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0 x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 12:46:14 GMT age: 22936 etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9539 Md5: a23d61d610c7b55d943fcb2636a01b65 Sha1: 82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065 Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7447 x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: es0qSFjAIAMF7HQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0 x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: AYaeawnEmwHkyx3h-yliVx-ARcRB3W5kbtFH5tARnL3YMD6e4WYAQw== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Fri, 13 Jan 2023 21:49:01 GMT age: 76769 etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7447 Md5: 2363dbe7bb6a459853d8d19cab50e70b Sha1: ded76de1dd453e40dbf6eaa8607cf19fac7f71a4 Sha256: f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5201aa-c0a6-43a3-b371-9091b021b171.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3dab6a58e53155e44117fbd9d40c4f38a7586efe1e69db1a064d2bbc5bbf185a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8681 x-amzn-requestid: 1060e7e7-3864-4ce5-b0aa-cfe24bb1a21a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: es0qdGvqoAMF57g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c1ce42-3cf8e4535d417e6f5142f23d;Sampled=0 x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:54 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: fn6fJcMooAv0V8MKuIM5EMGIEBijeoPBv5VWPtEz0j7LbfLoWw_soA== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Fri, 13 Jan 2023 21:49:01 GMT age: 76769 etag: "4ab08950008a4ab0a52091bb6f186c12814276e9" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8681 Md5: 5b6f9fd45fe3dfe1bc0ee610925c385d Sha1: 4ab08950008a4ab0a52091bb6f186c12814276e9 Sha256: 3dab6a58e53155e44117fbd9d40c4f38a7586efe1e69db1a064d2bbc5bbf185a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9135 x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: enAnoG6roAMFzgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0 x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: SUGIIWi8jWe9RoRu-3dQXvLAddjwjH05V1ubKzEOEQrFonzVjQdbtw== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 03:33:07 GMT age: 56123 etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9135 Md5: 64ba27a2f0a3bc61bd325f1fb317b755 Sha1: c65c58476b66cbb6269ba1d8412d270a0a003ae3 Sha256: 5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9154 x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: enAkCEN2IAMFuMQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0 x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 04:10:18 GMT age: 53892 etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9154 Md5: b1378f107c1996ade14a8fe7fd728072 Sha1: f52d98d9a0d1d343a539689ea14acf99e148cf8c Sha256: 4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
GET /5mxi0/w/2148138/?router_id=beb90333b96c117&__ref=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0&_bxpc_rtype=js_timeout HTTP/1.1 Host: za.continuetoplay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://track.fkg.tv/ Cookie: router_id=beb90333b96c117; LPSID=CB7 Upgrade-Insecure-Requests: 1	URL: za.continuetoplay.com/5mxi0/w/2148138/?router_id=beb903 (...) FQDN: za.continuetoplay.com IP: 143.204.55.96 HASH: 2d533d8843be708896a1c15e8a20421c5587bbe5f2cd3e3a1cc544815f399ceb 143.204.55.96 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 19822 Connection: keep-alive Date: Sat, 14 Jan 2023 19:08:31 GMT Server: Apache Set-Cookie: __ref=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0 router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:31 GMT; Max-Age=604800; path=/ SES=4790000426; expires=Sun, 15-Jan-2023 19:08:31 GMT; Max-Age=86400; path=/5mxi0/w/2148138/ uv=1; path=/ token=7ce06728d1f493dfe325607fa5d9879a2a0308f686713b53ff9ed8022485a8c3; expires=Sat, 14-Jan-2023 20:08:31 GMT; Max-Age=3600; path=/ Expires: Sat, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache, must-revalidate, no-transform X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Vary: Accept-Encoding Content-Encoding: gzip X-Cache: Miss from cloudfront Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: QzmUTa4AbR5vtbTPp5k-kn98gcL090yg6Y_MavKsiTp7ZjwUByNjsA== --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (37915) Size: 19822 Md5: 815bec4c2a361a22996c28d7adea6583 Sha1: 93bb7174ab0aac955d53b5e66d18c19383d29413 Sha256: 2d533d8843be708896a1c15e8a20421c5587bbe5f2cd3e3a1cc544815f399ceb
GET /p.js?f=sync&lr=1&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155 HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://za.continuetoplay.com/	URL: my.rtmark.net/p.js?f=sync&lr=1&partner=e4433d196201dabb (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0 139.45.195.8 HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: nginx Date: Sat, 14 Jan 2023 19:08:31 GMT Content-Length: 138 Connection: keep-alive Location: https://my.rtmark.net/p.js?f=sync&lr=1&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155 Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: * --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 138 Md5: aff950cab4c0265e21d401db15f1026d Sha1: f03e18461817f7a6546c8bf8fa8d686d7e30aca0 Sha256: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:31 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: c16b1530bbcd3d9226362c0a6100f014 Sha1: a49685aa2869a3674bc4c8fc58acd47f655c2111 Sha256: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:31 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e804586be26c88b95d554afe0ef24d5c Sha1: 6f99b1fe2330c4661608f17819a4490a92ca296c Sha256: 38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
GET /optimize.js?id=OPT-WTX2SLW HTTP/1.1 Host: www.googleoptimize.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googleoptimize.com/optimize.js?id=OPT-WTX2SLW FQDN: www.googleoptimize.com IP: 142.250.74.78 HASH: cee2f45ca383cea3eb6e0e843180f65349bc04bd317c17475fa9a03be86bad31 142.250.74.78 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Sat, 14 Jan 2023 19:08:31 GMT expires: Sat, 14 Jan 2023 19:08:31 GMT cache-control: private, max-age=900 last-modified: Sat, 14 Jan 2023 18:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 43468 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1921) Size: 43468 Md5: 123fab1302d07f2d275d063c40b5e6d8 Sha1: 47fdba7b89e9fce77b694f8517e5afe3c114e81a Sha256: cee2f45ca383cea3eb6e0e843180f65349bc04bd317c17475fa9a03be86bad31
GET /gtm.js?id=GTM-MF387SN HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtm.js?id=GTM-MF387SN FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: eedd88a6fcbba02071e46e0d2d8f5082aff5b133c97d1a412c35b6cc65f322ff 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Sat, 14 Jan 2023 19:08:31 GMT expires: Sat, 14 Jan 2023 19:08:31 GMT cache-control: private, max-age=900 last-modified: Sat, 14 Jan 2023 18:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 61352 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (40004) Size: 61352 Md5: 6764d4cdfe6de40e8908d2fb3ff9f947 Sha1: b8e67a2c69bccb5ea8efa1b05c92cd4cc071a23b Sha256: eedd88a6fcbba02071e46e0d2d8f5082aff5b133c97d1a412c35b6cc65f322ff
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 51f69d2eed4e988eacfb6ae5b1cba0192a9463443dfde39d2f4455b687752b7c 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "51F69D2EED4E988EACFB6AE5B1CBA0192A9463443DFDE39D2F4455B687752B7C" Last-Modified: Sat, 14 Jan 2023 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9062 Expires: Sat, 14 Jan 2023 21:39:33 GMT Date: Sat, 14 Jan 2023 19:08:31 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9df851d78eeaa83559a9da74bdb9adbd Sha1: 558c6b67e03c39943c67acbf8a6a29af17279cb6 Sha256: 51f69d2eed4e988eacfb6ae5b1cba0192a9463443dfde39d2f4455b687752b7c
GET /media/images/logos/2022/stream.baseplay.co_logo_white.svg HTTP/1.1 Host: basebonecdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://za.continuetoplay.com/	URL: basebonecdn.com/media/images/logos/2022/stream.baseplay (...) FQDN: basebonecdn.com IP: 172.67.190.201 HASH: f239482ae08e4134651ea441408aedf5d90a509416d96100f06f477c152b2a62 172.67.190.201 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Sat, 14 Jan 2023 19:08:31 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 03 May 2022 06:55:44 GMT x-amz-version-id: jk8FXp_YQU07nKfA5pdjIBHbKgD4aiwQ Content-Encoding: gzip ETag: W/"7a866746db91970a763e0e4720370124" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: DjNl4TtUBlT8UCCIbfCbB9YUIwA0ZEmIZRL-akCYZHmbap4obtEYnQ== Cache-Control: max-age=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SXVic83D83uul9etVhXrYmeH7n77zVxkrddKDfgTMIch6JfOPbo0n1qSKr0Q9V3MsHcUiip%2FzN%2BCN3ZHk7ql7T10kU5x26TgFDMaUeT5tFoPoz2i8LiD817t3USTDU49slU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7898a92a2c2e0b69-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (5439), with no line terminators Size: 2553 Md5: 59e3a3eb3b1cf0460fd704f94031dab9 Sha1: 9f7161a1938a1fbc42d6eba84046b4f9a4fa8b42 Sha256: f239482ae08e4134651ea441408aedf5d90a509416d96100f06f477c152b2a62
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:31 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: c16b1530bbcd3d9226362c0a6100f014 Sha1: a49685aa2869a3674bc4c8fc58acd47f655c2111 Sha256: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:31 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: c16b1530bbcd3d9226362c0a6100f014 Sha1: a49685aa2869a3674bc4c8fc58acd47f655c2111 Sha256: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
GET /p.js?f=sync&lr=1&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155 HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://za.continuetoplay.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: my.rtmark.net/p.js?f=sync&lr=1&partner=e4433d196201dabb (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 910c9a08dbacc4603c934adbc5b6f057c2c37833d1e0bc5bee5465eee94bfea9 139.45.195.8 HTTP/2 200 OK content-type: text/javascript server: nginx date: Sat, 14 Jan 2023 19:08:31 GMT content-length: 697 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 697 Md5: a6d255f2eb0b2c7d64159cef20667aec Sha1: 14c29b6145a612e72bd1dc59bb0ccb55415c530b Sha256: 910c9a08dbacc4603c934adbc5b6f057c2c37833d1e0bc5bee5465eee94bfea9
GET /favicon.ico HTTP/1.1 Host: za.continuetoplay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://za.continuetoplay.com/5mxi0/w/2148138/?router_id=beb90333b96c117&__ref=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0&_bxpc_rtype=js_timeout Cookie: router_id=beb90333b96c117; LPSID=CB7; uv=1; token=7ce06728d1f493dfe325607fa5d9879a2a0308f686713b53ff9ed8022485a8c3	URL: za.continuetoplay.com/favicon.ico FQDN: za.continuetoplay.com IP: 143.204.55.96 HASH: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e 143.204.55.96 HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1406 Connection: keep-alive Date: Sat, 14 Jan 2023 19:08:31 GMT Server: Apache Last-Modified: Thu, 16 Aug 2018 11:13:01 GMT ETag: "57e-5738b86b699ef" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: rCB01okyXgg9r0eGcoQGLvPlrSrBECQQIY9U7L0Q-Vd2whIaSUWTsw== --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16\012- data Size: 1406 Md5: 011201ab56695ce86ea2f190bce2670b Sha1: bb8fad6accf293e619360935047c23f00da3c769 Sha256: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:32 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: f96f3b88eebd362c0208a60d27e28068 Sha1: f244f8dfbc2677fbddcf0024ff7cf343e24205bb Sha256: 9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LF1R1KY13H&cid=471995059.1673723312&gtm=2oe1a1&aip=1&uid=d981541a57f0837463f0a2ab157fea1e&z=226672424 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&t (...) FQDN: www.google.no IP: 142.250.74.163 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 142.250.74.163 HTTP/2 200 OK content-type: image/gif p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Sat, 14 Jan 2023 19:08:32 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:32 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: f96f3b88eebd362c0208a60d27e28068 Sha1: f244f8dfbc2677fbddcf0024ff7cf343e24205bb Sha256: 9b3586a498232da2b246b2bd158d7fd75eb9b4ac00ed750bbe670f1b54fe0f2e
GET /img.gif?f=sync&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155&ttl=&rurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0%26_bxpc_rtype%3Djs_timeout HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: my.rtmark.net/img.gif?f=sync&partner=e4433d196201dabb3d (...) FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49 139.45.195.8 HTTP/2 200 OK content-type: image/gif server: nginx date: Sat, 14 Jan 2023 19:08:32 GMT content-length: 43 access-control-allow-origin: * access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=3833188638724e7b8206464fd90940c8; expires=Sun, 14 Jan 2024 19:08:32 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: b4491705564909da7f9eaf749dbbfbb1 Sha1: 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /frontend/google/ga4.php HTTP/1.1 Host: api.basebone.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Content-Length: 125 Origin: http://za.continuetoplay.com Connection: keep-alive Referer: http://za.continuetoplay.com/	URL: api.basebone.com/frontend/google/ga4.php FQDN: api.basebone.com IP: 80.74.141.5 HASH: 4f4cc2c452d815cfc35c7cbaa804b74337b980231bc0a0dd1405ac93f80d82bf 80.74.141.5 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 14 Jan 2023 19:08:32 GMT Server: Apache Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Transfer-Encoding: chunked Content-Encoding: gzip Set-Cookie: LPSID=CB6; path=/ --- Additional Info --- Magic: ASCII text, with no line terminators Size: 27 Md5: 399089a5a4aa675f2de0020c0d2dfe56 Sha1: 4bb635c9d4d04ad3937179af9084cbe3b4a01a0a Sha256: 4f4cc2c452d815cfc35c7cbaa804b74337b980231bc0a0dd1405ac93f80d82bf
POST /g/collect?v=2&tid=G-LF1R1KY13H&gtm=2oe1a1&_p=246964696&_gaz=1&cid=471995059.1673723312&ul=en-us&sr=1280x1024&_s=1&sid=1673723312&sct=1&seg=0&dl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0%26_bxpc_rtype%3Djs_timeout&dr=http%3A%2F%2Ftrack.fkg.tv%2F&dt=Download%20music&uid=d981541a57f0837463f0a2ab157fea1e&en=virtual_page_view&_fv=1&_nsi=1&_ss=1&ep.page_type=visit_landing&epn.context_id=4790000426&ep.alias=5mxi0&ep.advertising_campaign_id=98156&ep.webad=2148138&ep.flow_page=index&ep.messaging_platform_id=79&ep.product_id=13&ep.publisher_id=20223&ep.sub_affiliate_id=not_set&ep.monetization_channel=network&ep.traffic_source=ad_networks&ep.template_id=16851&ep.monetization_type=internal&ep.page_path=%2F5mxi0%2Fw%2F2148138%2F&upn.country_id=27&up.country_iso=ZA&upn.network_id=103&up.network_name=internet HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://za.continuetoplay.com Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0	URL: region1.analytics.google.com/g/collect?v=2&tid=G-LF1R1K (...) FQDN: region1.analytics.google.com IP: 216.239.32.36 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 216.239.32.36 HTTP/2 204 No Content content-type: text/plain access-control-allow-origin: http://za.continuetoplay.com date: Sat, 14 Jan 2023 19:08:32 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:32 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 2f8ae4ab9ee17e2598e9299bdc0f44c0 Sha1: ab4c7d1750edf513359218ab6d0b81cdd4dcb90c Sha256: 75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /g/collect?v=2&tid=G-LF1R1KY13H&cid=471995059.1673723312&gtm=2oe1a1&aip=1&uid=d981541a57f0837463f0a2ab157fea1e HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://za.continuetoplay.com Connection: keep-alive Referer: http://za.continuetoplay.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0	URL: stats.g.doubleclick.net/g/collect?v=2&tid=G-LF1R1KY13H& (...) FQDN: stats.g.doubleclick.net IP: 173.194.222.155 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 173.194.222.155 HTTP/2 204 No Content content-type: text/plain access-control-allow-origin: http://za.continuetoplay.com date: Sat, 14 Jan 2023 19:08:32 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 14 Jan 2023 19:08:32 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 16fdc7481eb2bf489762b6b6ad440216 Sha1: 8ba97c0fac5d5edf8ae49bccb0ec2ba8e251f646 Sha256: 465edacc998277376411200c9d9e30fdc1290717d1c5857ff226e73a33bfd516

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F" 

                                        
                                            
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13613 

                                        
                                            
Expires: Sat, 14 Jan 2023 22:55:20 GMT 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:27 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    0643dc6b6fed33b3537160b6bb77bcbf

                                                Sha1:   aa43bd1fbb30d2219f3285c1ee4991ffb33562c5

                                                Sha256: f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD" 

                                        
                                            
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8111 

                                        
                                            
Expires: Sat, 14 Jan 2023 21:23:38 GMT 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:27 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f7bd85a261739c122eefb74ffddaec99

                                                Sha1:   e2e059b0740592e8591d432249aafe5fcb8af23c

                                                Sha256: 71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: 6sE9ez6CXibxiIg8bOcQATfQ4JXS+VSl+RZCONhypRM4FW8Vsb4ZqCeXQz2U8RsGBPkIC07bHewto3PL+X34BQ== 

                                        
                                            
x-amz-request-id: 91J7DNFCCXP49H03 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 18:55:03 GMT 

                                        
                                            
age: 804 

                                        
                                            
last-modified: Mon, 09 Jan 2023 18:04:21 GMT 

                                        
                                            
etag: "7b922915ebf1fa3639b333f994c74f24" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    7b922915ebf1fa3639b333f994c74f24

                                                Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938

                                                Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

                                        
                                            GET /ui/cache HTTP/1.1 

                                        
                                            
Host: track.fkg.tv

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 

                                        
                                            
Cookie: router_id=beb90333b96c117; LPSID=CB4

                                         80.74.141.5

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:28 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ 

                                        
                                            
Content-Length: 0 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 18:33:45 GMT 

                                        
                                            
age: 2083 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /ui/etag HTTP/1.1 

                                        
                                            
Host: track.fkg.tv

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
X-BXP-CID: d981541a57f0837463f0a2ab157fea1e 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 

                                        
                                            
Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e

                                         80.74.141.5

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:28 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ 

                                        
                                            
ETag: "d981541a57f0837463f0a2ab157fea1e" 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   51

                                                Md5:    b2e0c5df3e75511e51ee05bc6c77850c

                                                Sha1:   b3161ff195c77ccfc733cd1ddbe700e571ffb86d

                                                Sha256: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d

                                        
                                            GET /ui/cache HTTP/1.1 

                                        
                                            
Host: track.fkg.tv

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
X-BXP-CID: d981541a57f0837463f0a2ab157fea1e 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://track.fkg.tv/ui/inject?router_id=beb90333b96c117&_lurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0 

                                        
                                            
Cookie: router_id=beb90333b96c117; LPSID=CB4; I=d981541a57f0837463f0a2ab157fea1e

                                         80.74.141.5

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:28 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Set-Cookie: router_id=beb90333b96c117; expires=Sat, 21-Jan-2023 19:08:28 GMT; Max-Age=604800; path=/ 

                                        
                                            
Last-Modified: Wed, 30 Jun 2010 21:36:48 GMT 

                                        
                                            
Expires: Tue, 31 Dec 2030 23:30:45 GMT 

                                        
                                            
Cache-Control: public, max-age=630720000 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   51

                                                Md5:    b2e0c5df3e75511e51ee05bc6c77850c

                                                Sha1:   b3161ff195c77ccfc733cd1ddbe700e571ffb86d

                                                Sha256: e0e3bc3ea58729d34e5682151bc8a4a65b8436d7763ae46a877780a57e53c27d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 847 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:28 GMT 

                                        
                                            
Last-Modified: Sat, 14 Jan 2023 18:54:21 GMT 

                                        
                                            
Server: ECS (ska/F70C) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    c01ec61f7ca77158f474b3ab519c12fa

                                                Sha1:   fc82ae0fcd73a83a980b75709a08e65239894e4a

                                                Sha256: f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54

                                        
                                            GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221673708231037%22 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 20973 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 19:01:57 GMT 

                                        
                                            
age: 392 

                                        
                                            
last-modified: Sat, 14 Jan 2023 14:57:11 GMT 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (20973), with no line terminators

                                                Size:   20973

                                                Md5:    94d1c1f63e4ed19055437cf2336dc4a8

                                                Sha1:   ca3d5abe3b0dfea265c7ac67a52e0761da3ef820

                                                Sha256: cc358088dca45facdce8e873e11bb0529db41f5478da710c99f2b71b5c606e86

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" 

                                        
                                            
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11708 

                                        
                                            
Expires: Sat, 14 Jan 2023 22:23:38 GMT 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    256e39696ba05f2324bbc49b2a396115

                                                Sha1:   e1cf8b15abd0a20eb1218be517c03459514a59e0

                                                Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9" 

                                        
                                            
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11708 

                                        
                                            
Expires: Sat, 14 Jan 2023 22:23:38 GMT 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    256e39696ba05f2324bbc49b2a396115

                                                Sha1:   e1cf8b15abd0a20eb1218be517c03459514a59e0

                                                Sha256: d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9539 

                                        
                                            
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: epfDqEAZIAMFudQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA== 

                                        
                                            
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 12:46:14 GMT 

                                        
                                            
age: 22936 

                                        
                                            
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9539

                                                Md5:    a23d61d610c7b55d943fcb2636a01b65

                                                Sha1:   82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065

                                                Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5201aa-c0a6-43a3-b371-9091b021b171.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8681 

                                        
                                            
x-amzn-requestid: 1060e7e7-3864-4ce5-b0aa-cfe24bb1a21a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: es0qdGvqoAMF57g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63c1ce42-3cf8e4535d417e6f5142f23d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:54 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: fn6fJcMooAv0V8MKuIM5EMGIEBijeoPBv5VWPtEz0j7LbfLoWw_soA== 

                                        
                                            
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 13 Jan 2023 21:49:01 GMT 

                                        
                                            
age: 76769 

                                        
                                            
etag: "4ab08950008a4ab0a52091bb6f186c12814276e9" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8681

                                                Md5:    5b6f9fd45fe3dfe1bc0ee610925c385d

                                                Sha1:   4ab08950008a4ab0a52091bb6f186c12814276e9

                                                Sha256: 3dab6a58e53155e44117fbd9d40c4f38a7586efe1e69db1a064d2bbc5bbf185a

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9154 

                                        
                                            
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: enAkCEN2IAMFuMQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog== 

                                        
                                            
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 04:10:18 GMT 

                                        
                                            
age: 53892 

                                        
                                            
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9154

                                                Md5:    b1378f107c1996ade14a8fe7fd728072

                                                Sha1:   f52d98d9a0d1d343a539689ea14acf99e148cf8c

                                                Sha256: 4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d

                                        
                                            GET /p.js?f=sync&lr=1&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155 HTTP/1.1 

                                        
                                            
Host: my.rtmark.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/

                                         139.45.195.8

                                        
                                            HTTP/1.1 302 Moved Temporarily 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
Content-Length: 138 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Location: https://my.rtmark.net/p.js?f=sync&lr=1&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155 

                                        
                                            
Strict-Transport-Security: max-age=1 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Timing-Allow-Origin: * 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   138

                                                Md5:    aff950cab4c0265e21d401db15f1026d

                                                Sha1:   f03e18461817f7a6546c8bf8fa8d686d7e30aca0

                                                Sha256: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    e804586be26c88b95d554afe0ef24d5c

                                                Sha1:   6f99b1fe2330c4661608f17819a4490a92ca296c

                                                Sha256: 38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db

                                        
                                            GET /gtm.js?id=GTM-MF387SN HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.168

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-headers: Cache-Control 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
expires: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
cache-control: private, max-age=900 

                                        
                                            
last-modified: Sat, 14 Jan 2023 18:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Google Tag Manager 

                                        
                                            
content-length: 61352 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (40004)

                                                Size:   61352

                                                Md5:    6764d4cdfe6de40e8908d2fb3ff9f947

                                                Sha1:   b8e67a2c69bccb5ea8efa1b05c92cd4cc071a23b

                                                Sha256: eedd88a6fcbba02071e46e0d2d8f5082aff5b133c97d1a412c35b6cc65f322ff

                                        
                                            GET /media/images/logos/2022/stream.baseplay.co_logo_white.svg HTTP/1.1 

                                        
                                            
Host: basebonecdn.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/

                                         172.67.190.201

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/svg+xml

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Tue, 03 May 2022 06:55:44 GMT 

                                        
                                            
x-amz-version-id: jk8FXp_YQU07nKfA5pdjIBHbKgD4aiwQ 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
ETag: W/"7a866746db91970a763e0e4720370124" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: DjNl4TtUBlT8UCCIbfCbB9YUIwA0ZEmIZRL-akCYZHmbap4obtEYnQ== 

                                        
                                            
Cache-Control: max-age=86400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SXVic83D83uul9etVhXrYmeH7n77zVxkrddKDfgTMIch6JfOPbo0n1qSKr0Q9V3MsHcUiip%2FzN%2BCN3ZHk7ql7T10kU5x26TgFDMaUeT5tFoPoz2i8LiD817t3USTDU49slU%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 7898a92a2c2e0b69-OSL 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (5439), with no line terminators

                                                Size:   2553

                                                Md5:    59e3a3eb3b1cf0460fd704f94031dab9

                                                Sha1:   9f7161a1938a1fbc42d6eba84046b4f9a4fa8b42

                                                Sha256: f239482ae08e4134651ea441408aedf5d90a509416d96100f06f477c152b2a62

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    c16b1530bbcd3d9226362c0a6100f014

                                                Sha1:   a49685aa2869a3674bc4c8fc58acd47f655c2111

                                                Sha256: ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: za.continuetoplay.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/5mxi0/w/2148138/?router_id=beb90333b96c117&__ref=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0&_bxpc_rtype=js_timeout 

                                        
                                            
Cookie: router_id=beb90333b96c117; LPSID=CB7; uv=1; token=7ce06728d1f493dfe325607fa5d9879a2a0308f686713b53ff9ed8022485a8c3

                                         143.204.55.96

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/vnd.microsoft.icon

                                        

                                        
                                            
Content-Length: 1406 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Date: Sat, 14 Jan 2023 19:08:31 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 16 Aug 2018 11:13:01 GMT 

                                        
                                            
ETag: "57e-5738b86b699ef" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
X-Cache: Miss from cloudfront 

                                        
                                            
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: rCB01okyXgg9r0eGcoQGLvPlrSrBECQQIY9U7L0Q-Vd2whIaSUWTsw== 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  MS Windows icon resource - 1 icon, 16x16\012- data

                                                Size:   1406

                                                Md5:    011201ab56695ce86ea2f190bce2670b

                                                Sha1:   bb8fad6accf293e619360935047c23f00da3c769

                                                Sha256: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LF1R1KY13H&cid=471995059.1673723312&gtm=2oe1a1&aip=1&uid=d981541a57f0837463f0a2ab157fea1e&z=226672424 HTTP/1.1 

                                        
                                            
Host: www.google.no

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.163

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
date: Sat, 14 Jan 2023 19:08:32 GMT 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
cache-control: no-cache, no-store, must-revalidate 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: cafe 

                                        
                                            
content-length: 42 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    d89746888da2d9510b64a9f031eaecd5

                                                Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                                Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                        
                                            GET /img.gif?f=sync&partner=e4433d196201dabb3d3131ccb7cd09dc39b5898761466ff24d75e42ccade3155&ttl=&rurl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0%26_bxpc_rtype%3Djs_timeout HTTP/1.1 

                                        
                                            
Host: my.rtmark.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         139.45.195.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 14 Jan 2023 19:08:32 GMT 

                                        
                                            
content-length: 43 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE 

                                        
                                            
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token 

                                        
                                            
access-control-expose-headers: Authorization 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
set-cookie: ID=3833188638724e7b8206464fd90940c8; expires=Sun, 14 Jan 2024 19:08:32 GMT; secure; SameSite=None 

                                        
                                            
strict-transport-security: max-age=1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
timing-allow-origin: *, * 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    b4491705564909da7f9eaf749dbbfbb1

                                                Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8

                                                Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

                                        
                                            POST /g/collect?v=2&tid=G-LF1R1KY13H&gtm=2oe1a1&_p=246964696&_gaz=1&cid=471995059.1673723312&ul=en-us&sr=1280x1024&_s=1&sid=1673723312&sct=1&seg=0&dl=http%3A%2F%2Fza.continuetoplay.com%2F5mxi0%2Fw%2F2148138%2F%3Frouter_id%3Dbeb90333b96c117%26__ref%3Dhttp%253A%252F%252Fza.continuetoplay.com%252F5mxi0%26_bxpc_rtype%3Djs_timeout&dr=http%3A%2F%2Ftrack.fkg.tv%2F&dt=Download%20music&uid=d981541a57f0837463f0a2ab157fea1e&en=virtual_page_view&_fv=1&_nsi=1&_ss=1&ep.page_type=visit_landing&epn.context_id=4790000426&ep.alias=5mxi0&ep.advertising_campaign_id=98156&ep.webad=2148138&ep.flow_page=index&ep.messaging_platform_id=79&ep.product_id=13&ep.publisher_id=20223&ep.sub_affiliate_id=not_set&ep.monetization_channel=network&ep.traffic_source=ad_networks&ep.template_id=16851&ep.monetization_type=internal&ep.page_path=%2F5mxi0%2Fw%2F2148138%2F&upn.country_id=27&up.country_iso=ZA&upn.network_id=103&up.network_name=internet HTTP/1.1 

                                        
                                            
Host: region1.analytics.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: http://za.continuetoplay.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Content-Length: 0

                                         216.239.32.36

                                        
                                            HTTP/2 204 No Content 

                                        
                                            
content-type: text/plain

                                        

                                        
                                            
access-control-allow-origin: http://za.continuetoplay.com 

                                        
                                            
date: Sat, 14 Jan 2023 19:08:32 GMT 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
cache-control: no-cache, no-store, must-revalidate 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Golfe2 

                                        
                                            
content-length: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /g/collect?v=2&tid=G-LF1R1KY13H&cid=471995059.1673723312&gtm=2oe1a1&aip=1&uid=d981541a57f0837463f0a2ab157fea1e HTTP/1.1 

                                        
                                            
Host: stats.g.doubleclick.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: http://za.continuetoplay.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://za.continuetoplay.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Content-Length: 0

                                         173.194.222.155

                                        
                                            HTTP/2 204 No Content 

                                        
                                            
content-type: text/plain

                                        

                                        
                                            
access-control-allow-origin: http://za.continuetoplay.com 

                                        
                                            
date: Sat, 14 Jan 2023 19:08:32 GMT 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
cache-control: no-cache, no-store, must-revalidate 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Golfe2 

                                        
                                            
content-length: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

URL	za.continuetoplay.com/5mxi0
IP	143.204.55.72 (United States)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-14 19:08:39 UTC
Status	Loading report..
IDS alerts	4
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (18)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 143.204.55.72

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: continuetoplay.com

No other reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (51)

Overview

Domain Summary (18)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 143.204.55.72

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: continuetoplay.com

No other reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (51)

Network Intrusion Detection Systems