Overview

URLtodayprizeforyou.com/fr/tar/sur5box-495/4
IP 104.26.14.62 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2023-02-19 18:42:04 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-13T05:09:07Z 3042 7975 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-13T05:09:10Z 782 2374 35.241.9.150
e1.o.lencr.org (3) 6159 2021-08-20T09:36:30Z 2023-03-13T05:21:46Z 1014 3432 23.36.76.226
cdn.jsdelivr.net (2) 439 2012-09-30T02:15:09Z 2023-03-13T06:17:54Z 879 47482 151.101.129.229
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-13T05:09:14Z 606 127 52.40.49.56
wildfungames.com (1) 0 2016-11-21T04:51:35Z 2023-03-13T05:39:32Z 531 652 104.26.4.134
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-13T05:09:13Z 333 391 34.117.237.239
ocsp.digicert.com (4) 86 2012-05-21T09:02:23Z 2023-03-13T06:00:13Z 1364 2352 93.184.220.29
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-13T05:09:16Z 3246 53227 34.120.237.76
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-13T05:09:35Z 413 5894 34.160.144.191
todayprizeforyou.com (1) 0 2021-11-23T13:02:29Z 2023-03-13T05:41:07Z 372 697 104.26.14.62
code.jquery.com (1) 634 2012-05-21T19:28:02Z 2023-03-13T05:09:57Z 402 31333 69.16.175.10
ocsp.globalsign.com (1) 2075 2012-07-20T19:46:16Z 2023-03-13T05:09:19Z 368 1920 104.18.20.226
matomo.topworldstats.com (2) 0 2023-02-06T15:03:59Z 2023-03-02T02:16:06Z 1226 1428 104.26.8.40
beevakum.net (2) 156073 2021-02-10T04:56:26Z 2023-03-13T06:42:41Z 946 699 139.45.197.250

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-19 medium todayprizeforyou.com/fr/tar/sur5box-495/4 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.26.14.62
Date UQ / IDS / BL URL IP
2023-05-22 20:04:52 UTC 0 - 0 - 3 todayprizeforyou.com/fr/tar/sur5box-495/4/ 104.26.14.62
2023-05-16 20:25:29 UTC 0 - 0 - 6 todayprizeforyou.com/fr/tar/sur5box-495/4 104.26.14.62
2023-05-08 20:51:50 UTC 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-495/400 104.26.14.62
2023-05-06 08:32:32 UTC 0 - 0 - 3 todayprizeforyou.com/fr/tar/sur5box-495/400 104.26.14.62
2023-04-04 08:14:09 UTC 0 - 0 - 1 todayprizeforyou.com/fr/tar/sur5box-995/4 104.26.14.62


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-04 14:55:47 UTC 0 - 0 - 8 controlleralltime.com/go/usdeliverychat2/inde (...) 104.21.85.68
2023-06-04 14:55:07 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/32098154902375 (...) 162.159.134.233
2023-06-04 14:54:58 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/33067090835433 (...) 162.159.133.233
2023-06-04 14:53:13 UTC 0 - 2 - 0 describerectif.top/ 188.114.97.1
2023-06-04 14:52:51 UTC 0 - 3 - 0 e.datingbuzz.top/util/push-external-dt4/?enco (...) 104.21.63.2


Last 5 reports on domain: todayprizeforyou.com
Date UQ / IDS / BL URL IP
2023-05-30 20:27:03 UTC 0 - 0 - 1 todayprizeforyou.com/ 104.26.15.62
2023-05-30 20:27:03 UTC 0 - 0 - 1 todayprizeforyou.com/fr/tar/sur5box-495/4 104.26.15.62
2023-05-29 06:59:12 UTC 0 - 0 - 2 todayprizeforyou.com/ 172.67.71.92
2023-05-29 06:59:11 UTC 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-495/4 172.67.71.92
2023-05-26 13:54:51 UTC 0 - 0 - 2 todayprizeforyou.com/fr/tar/sur5box-995/4 172.67.71.92


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-25 04:05:41 UTC 0 - 0 - 4 wildfungames.com/land/rou?campaign=ThIi&utm_c (...) 104.26.4.134
2023-03-19 08:15:03 UTC 0 - 0 - 4 wildfungames.com/land/rou?campaign=ThIi&web=1 (...) 172.67.70.29
2022-09-16 15:24:54 UTC 0 - 0 - 4 myjollyrudder.com/land/rou?campaign=thii&web= (...) 104.26.3.176
2022-09-16 14:10:57 UTC 0 - 0 - 5 winnersofvouchers.com/ 172.67.195.238
2022-09-16 09:56:16 UTC 0 - 0 - 5 giftonlinetoday.com/fr/tar/sur3box-bg-995/65 172.67.72.185

JavaScript

Executed Scripts (13)

Executed Evals (1)
#1 JavaScript::Eval (size: 80) - SHA256: e6b8bf99b338119b3ec00155391e48680fcc9fdf9d744044681524ac37f0e8bf
(() => {
    const a = async
    function name() {};
    window['z1ptepxs75s'] = true;
})()

Executed Writes (0)


HTTP Transactions (37)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "715F77554399136F5C4DA17A22BE9112CA0EE75CEB8B0C5910A005F70E255E94"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8753
Expires: Sun, 19 Feb 2023 21:07:46 GMT
Date: Sun, 19 Feb 2023 18:41:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0C60B1781C2BFD8A23C813767AA0CB3469ED185B795554AA4E63BF3839AFDCF5"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4981
Expires: Sun, 19 Feb 2023 20:04:54 GMT
Date: Sun, 19 Feb 2023 18:41:53 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Content-Length, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Feb 2023 17:53:31 GMT
age: 2902
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6579742C183AEFB9CE309BBD4615079BFA9AB50F0096ABC0415F9014479CE0F6"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9783
Expires: Sun, 19 Feb 2023 21:24:56 GMT
Date: Sun, 19 Feb 2023 18:41:53 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: aJrUiOrAwHkqng15yRG41qiwymopJT7n4haSNI+7yMKcWHj2XK5cJHWkg7Rx4PMHtBFtK+0qff2+SJ5MgPDNAw==
x-amz-request-id: V0N0M8NCJG7X2AJA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Sun, 19 Feb 2023 17:51:28 GMT
age: 3025
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sun, 19 Feb 2023 18:41:53 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /fr/tar/sur5box-495/4 HTTP/1.1 
Host: todayprizeforyou.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.26.14.62
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Date: Sun, 19 Feb 2023 18:41:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
location: https://wildfungames.com/land/rou?campaign=ThIg&utm_campaign=ThIg&web=1&tcode=plc05b7096f9ad0838f176fad0483144
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k2fgsCbymI74PpoNPb5wPOzM%2BzY5OLEHpDrjMITcD69lm9ZhslWWCFtgezaoFxEXu7Q2UcgidW6h1ZTKlABPO2SrdaBHWxelRjMxgzvss0RCeggrLpVpstjWDGC2NoJgeoEGej8a"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79c123a4ba58b50f-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "18EA779DA9A2A80B2AE603CA7CBCCE21842347D295D61D0387685EAD9D09E652"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4122
Expires: Sun, 19 Feb 2023 19:50:35 GMT
Date: Sun, 19 Feb 2023 18:41:53 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Content-Length, Content-Type, Cache-Control, Pragma, Retry-After, ETag, Expires, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Feb 2023 18:20:33 GMT
age: 1281
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96149E604AD1E11AB2B100B60E4605B7213F215B0A788506185DEF01954CB70F"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19882
Expires: Mon, 20 Feb 2023 00:13:16 GMT
Date: Sun, 19 Feb 2023 18:41:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "18EA779DA9A2A80B2AE603CA7CBCCE21842347D295D61D0387685EAD9D09E652"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Sun, 19 Feb 2023 19:50:35 GMT
Date: Sun, 19 Feb 2023 18:41:54 GMT
Connection: keep-alive

                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sun, 19 Feb 2023 18:41:54 GMT
content-encoding: gzip
content-length: 30875
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1676832114.dop230.sk1.t,1676832114.cds229.sk1.hn,1676832114.cds210.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30875
Md5:    899f0189aaf034bbba5340f724d91dfa
Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8
Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4631
Cache-Control: max-age=89276
Date: Sun, 19 Feb 2023 18:41:54 GMT
Etag: "63f11517-116"
Expires: Mon, 20 Feb 2023 19:29:50 GMT
Last-Modified: Sat, 18 Feb 2023 18:12:39 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 152
Cache-Control: max-age=171205
Date: Sun, 19 Feb 2023 18:41:54 GMT
Etag: "63f2669f-118"
Expires: Tue, 21 Feb 2023 18:15:19 GMT
Last-Modified: Sun, 19 Feb 2023 18:12:47 GMT
Server: ECS (amb/6B74)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.129.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 19 Feb 2023 18:41:54 GMT
age: 22520757
x-served-by: cache-fra19162-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21830
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65299)
Size:   21830
Md5:    a5cbb97cf034dd181106adecdafe3035
Sha1:   5fca1af6c76dd3e609f7f92841e564df1281927a
Sha256: 5ae018daf5df2cd903f80162efbaa3e138e0ed47ff90a315f2e2c497dc88a890
                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.129.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 19 Feb 2023 18:41:54 GMT
age: 13288889
x-served-by: cache-fra19147-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24100
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65326)
Size:   24100
Md5:    849f3e827da80e4e4c6a8c49689f057d
Sha1:   035d81aaaf6da3ffa5ce241179a9e14d533e7a3b
Sha256: 9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=171053
Date: Sun, 19 Feb 2023 18:41:54 GMT
Etag: "63f2669f-118"
Expires: Tue, 21 Feb 2023 18:12:47 GMT
Last-Modified: Sun, 19 Feb 2023 18:12:47 GMT
Server: nginx
Content-Length: 280

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 19 Feb 2023 18:41:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A9EC1C76E5299D48F394E6DD360DB230DF0F9950"
Expires: Mon, 20 Feb 2023 06:00:00 GMT
Last-Modified: Sun, 19 Feb 2023 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1488
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c123abd905b4f3-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    5629d56ac1356ddc5789413dc708065d
Sha1:   618b31748cb265c189819a95ccecbc4027ed9f3d
Sha256: ccc0c14d45209d2bb4596db52ee9a6e5d4cde72430aca063aef1d95ddd0dadeb
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CblWVkCrPi4yz6COsg2C7A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.40.49.56
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KoGckYNXlnI9dIoj5cMNVAbjbgw=

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "12F980C6CE3E9BAC3A24103D1B4C0A099DB64DF082C532ECECE30B073E44B22D"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2262
Expires: Sun, 19 Feb 2023 19:19:36 GMT
Date: Sun, 19 Feb 2023 18:41:54 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1593
Md5:    4bb3e2acd5e93119d7a9b37b7ce058c9
Sha1:   5280fdcb75eaca34c2ae66a6c71d9a3f6fbd8beb
Sha256: e44c45d455d90699c53e5238988fe6dcd71ad80e543ff622f3c3dc6de37ec8aa
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=171053
Date: Sun, 19 Feb 2023 18:41:54 GMT
Etag: "63f2669f-118"
Expires: Tue, 21 Feb 2023 18:12:47 GMT
Last-Modified: Sun, 19 Feb 2023 18:12:47 GMT
Server: nginx
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36AFC32E453FA0113631B7F6B0A031C909F3C369E3135AEB964403DE9EEED284"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4341
Expires: Sun, 19 Feb 2023 19:54:15 GMT
Date: Sun, 19 Feb 2023 18:41:54 GMT
Connection: keep-alive

                                        
                                            POST /matomo.php?action_name=&idsite=2&rec=1&r=881487&h=18&m=41&s=54&url=https%3A%2F%2Fwildfungames.com%2Fland%2Frou%3Fcampaign%3DThIg%26utm_campaign%3DThIg%26web%3D1%26tcode%3Dplc05b7096f9ad0838f176fad0483144&_id=672d21bfbc1b19b0&_idn=1&send_image=0&_rcn=ThIg&_refts=1676832115&cookie=1&res=1280x1024&pv_id=giO4fb&pf_net=102&pf_srv=338&pf_tfr=1&pf_dm1=267&uadata=%7B%7D HTTP/1.1 
Host: matomo.topworldstats.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.40
HTTP/2 204 No Content
                                            
date: Sun, 19 Feb 2023 18:41:54 GMT
access-control-allow-origin: https://wildfungames.com
access-control-allow-credentials: true
referrer-policy: origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pt75DgpEyeZq%2BEUJ7mmaJA3x5mdxQPJaaFKiJLePDl3RXMr0H9R%2F9NJ91B1TYkTQFlsqMiqgUB2RjnMBOOeu5TmsqXnkgxYKVBajI8KVjkvS8mCHI4WNAnwQv2hZ69vNbtGGHuPnUC8hTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c123acb8fc1c0e-OSL
X-Firefox-Spdy: h2

                                        
                                            POST /zone?&pub=0&zone_id=5578843&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1 
Host: beevakum.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wildfungames.com
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             139.45.197.250
HTTP/2 200 OK
                                            
server: nginx
date: Sun, 19 Feb 2023 18:41:54 GMT
content-length: 0
x-trace-id: 986cb9b273cf7a8a375e7fb7dd20ec43
access-control-allow-origin: https://wildfungames.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4331
Expires: Sun, 19 Feb 2023 19:54:07 GMT
Date: Sun, 19 Feb 2023 18:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4331
Expires: Sun, 19 Feb 2023 19:54:07 GMT
Date: Sun, 19 Feb 2023 18:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4331
Expires: Sun, 19 Feb 2023 19:54:07 GMT
Date: Sun, 19 Feb 2023 18:41:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4331
Expires: Sun, 19 Feb 2023 19:54:07 GMT
Date: Sun, 19 Feb 2023 18:41:56 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58cf2ecf-2995-41f9-b2f6-6c7a81ec46a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3096
x-amzn-requestid: 7c0b5600-ee03-4dba-b18e-e323968d6094
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AXl72GLgoAMFXMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ec837e-75f7d8196bdbbd3e52eb0003;Sampled=0
x-amzn-remapped-date: Wed, 15 Feb 2023 07:02:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: emBnrWCijsjqrdtsRMwr51UDhFvALIkr0kupOYOnkdxdP1vSeCdhqg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 09:39:29 GMT
age: 32547
etag: "480e09afd965891eb163ac812c22e7124ed1bb0f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3096
Md5:    674832720ab6807aebe8d120eab3aa8b
Sha1:   480e09afd965891eb163ac812c22e7124ed1bb0f
Sha256: 1dcad65a0189abe50368ecc1056762d1957250d5e1dded8f1f10bf07322ba9ca
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwK1XWOYMXy8qna9sVCV7q__QKMko9KXa8towbYhIj1EolPbqEuIHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 11:24:35 GMT
age: 26241
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6879
Md5:    9c5a0bab7d34e51ee6476be179b356ba
Sha1:   87917d3cf520d73b7b1029f44505e7700413d51d
Sha256: 136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb212a577-c815-4f61-8e65-f983a0a42400.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7557
x-amzn-requestid: 893ee1d7-7fa3-4d0b-8dce-d6392d442d1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Aeb1-FhUoAMFs5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ef4025-0b9f7bba735373b416a7b470;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 08:51:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sscrzmfYHkHMcsjCa0BXolote8vfzK7aMnsvoYzGikuZsMy7kufd4w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Feb 2023 22:08:22 GMT
age: 74014
etag: "2c861f08df9dd4d23c44e92eae3de0d060f9c8b0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8917
Md5:    c3bd4ca06f6c0bae17da38b67eac19eb
Sha1:   5182436c783aca2c0e39bd5aeff924b54869ce2c
Sha256: 30daeba913e4c331588dfaabc94054d06032dbc3810952356709af553d24d0ae
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f08137c-036d-495e-8806-ea2813f0c6b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8351
x-amzn-requestid: f95f5bf3-07a3-4bcb-a51e-ab563b69092d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AdoboEhtoAMFYsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eeede3-386836391408d1117d0f7a43;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 03:00:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tmkCikaQTQI258qNQZfp0OWNnUkyd7bxGfYUmPfX0AQuUCKRwbez2g==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 04:03:42 GMT
age: 52694
etag: "b9850e9ff1801069645f59d6cc8612ea4069186e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8351
Md5:    5b1573a58278ff85689704e2322606fa
Sha1:   b9850e9ff1801069645f59d6cc8612ea4069186e
Sha256: c9791366dc55e24124c696544f8fe4fcdee17e0c5a0971c9dbf8c248a7d10ab6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b480279-2590-4382-81b1-24b027e07e23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11525
x-amzn-requestid: 6976315f-a5c5-4268-ba27-ee4407b86407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AgMITFBioAMFweg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eff3ce-0b750d8e643e823042d5cf88;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 21:38:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: px53T--ho93lHQ9yC5x1iJrO7REbkzlowQwH1V1T8BVasLyT9yCL1Q==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Feb 2023 21:56:13 GMT
age: 74743
etag: "4d27074ad95bd4bde2fb79f4b2ecb11434b3c8c8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11525
Md5:    e69d793b99a3580240403d04ac2aa684
Sha1:   4d27074ad95bd4bde2fb79f4b2ecb11434b3c8c8
Sha256: 3ead4940dbccbae1663545f603abf717d3e27726469bbf6939a18cd9c74bbc8b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F934fc9eb-b4a6-4fbb-bd6e-d7b9db298c89.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8118
x-amzn-requestid: 7a6bad9e-f7de-48ff-a7b6-812f265fe8af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AjffAExyIAMF9DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f145f9-4efc5e4622fb1d482f0c4663;Sampled=0
x-amzn-remapped-date: Sat, 18 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 579r7yXBoSk1W50bPxCF8A2r31obx025ohBk3ltpxb1i5eRYEEv-ug==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Feb 2023 21:54:28 GMT
etag: "220ce699083537964b1bb8859c4d94ee47f04213"
age: 74848
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8118
Md5:    4b9d8b33f5612e1bf93f6736973766d8
Sha1:   220ce699083537964b1bb8859c4d94ee47f04213
Sha256: a102991c1ecd60a483f083b72096dd4fccbdf68951f2c453fbf849954ebdc9d6
                                        
                                            GET /land/rou?campaign=ThIg&utm_campaign=ThIg&web=1&tcode=plc05b7096f9ad0838f176fad0483144 HTTP/1.1 
Host: wildfungames.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             104.26.4.134
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Sun, 19 Feb 2023 18:41:54 GMT
vary: Accept-Encoding
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0vKl9XpVyZNaHnR%2BEx%2BtmjEfrvZ9T3hTzU%2F%2BIjCS16gksAcF135uOvkNV9maB45RQLTK6sp%2FLmX5Z4JJvd4ANDQu%2BCnuFKGUs4g8gzgP2BLsNWZJBzoZT2QOsvMnYII7juA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c123a84d48b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /matomo.js HTTP/1.1 
Host: matomo.topworldstats.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.40
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sun, 19 Feb 2023 18:41:54 GMT
last-modified: Mon, 06 Feb 2023 07:59:52 GMT
etag: W/"63e0b378-10132"
expires: Sun, 19 Feb 2023 18:44:29 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 3445
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XBGxAYeQlwj1Bpsn06jADQnV7Xhj8%2BgA8rQMWwLFdVc4k8S1p5Nm%2BKwRFejQvgPNOkn2P7GjBkZ42CyWCNF2l9%2Bk%2F%2BOsOtPWBfQVvlxFnwLMU6JWnzA31lr5AJd242RBz3iJgbZoi4C%2BQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c123ac68961c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /pfe/current/micro.tag.min.js?z=5578843&sw=/sw-check-permissions-cb761.js HTTP/1.1 
Host: beevakum.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wildfungames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Sun, 19 Feb 2023 18:41:54 GMT
last-modified: Tue, 07 Feb 2023 14:32:42 GMT
etag: W/"63e2610a-a083"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: