mastutorial.com/
200 OK 476 B IP
ASN #43350 NForce Entertainment B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (476), with no line terminators
Hash 2afca6b610f128489df0e016b4705fed
870b64512ee0a5d14c81476efe51d03ee3a12ade
9680785b6444dcbbfd7cdc358a28bace7105c415434cf3bf32ad74711ad5e759
GET / HTTP/1.1
Host: mastutorial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 476
content-type: text/html; charset=utf-8
date: Sun, 11 Dec 2022 23:10:42 GMT
server: nginx
set-cookie: sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d; path=/; domain=.mastutorial.com; expires=Sat, 30 Dec 2090 02:24:50 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9297
Expires: Mon, 12 Dec 2022 01:45:40 GMT
Date: Sun, 11 Dec 2022 23:10:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16824
Expires: Mon, 12 Dec 2022 03:51:07 GMT
Date: Sun, 11 Dec 2022 23:10:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3508
Expires: Mon, 12 Dec 2022 00:09:11 GMT
Date: Sun, 11 Dec 2022 23:10:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 11 Dec 2022 22:33:37 GMT
content-type: application/json
age: 2226
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xslx0s66ZOVREYHqprD9slw4uV9oKlDd/NcpVAE/gUmDoDzR6/sBY2Ye3vLXKvMPjZ6Fb8I6LAo=
x-amz-request-id: Y7NR36YCSMKB5FZY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 11 Dec 2022 22:49:22 GMT
age: 1281
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 23:10:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mastutorial.com/favicon.ico
404 Not Found 9 B URL HTTP/1.1 mastutorial.com/favicon.ico
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: mastutorial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mastutorial.com/
Cookie: sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 11 Dec 2022 23:10:42 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 11 Dec 2022 23:07:56 GMT
age: 167
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e12bb655426d080117693ba116f398cf
8fe1f7f8d0b191baed2decba3523656da97077f5
2c25ba0d1c806de98d5489934acd8e2f17487e4f7e40c7f0d39094ce49f91b8d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1692
Cache-Control: max-age=123865
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 23:10:43 GMT
Etag: "63959db0-1d7"
Expires: Tue, 13 Dec 2022 09:35:08 GMT
Last-Modified: Sun, 11 Dec 2022 09:06:56 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
mastutorial.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDgwNzQ0MywiaWF0IjoxNjcwODAwMjQzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc250dnUwNGxsYnFzcDc2cWswcDlrbzMiLCJuYmYiOjE2NzA4MDAyNDMsInRzIjoxNjcwODAwMjQzMTAxMDExfQ.QTGCnDvpKGy7AEyD4UpMn6U2HoWeH4ZNfuIrgduvEqs&sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d
302 Found 11 B URL HTTP/1.1 mastutorial.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDgwNzQ0MywiaWF0IjoxNjcwODAwMjQzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc250dnUwNGxsYnFzcDc2cWswcDlrbzMiLCJuYmYiOjE2NzA4MDAyNDMsInRzIjoxNjcwODAwMjQzMTAxMDExfQ.QTGCnDvpKGy7AEyD4UpMn6U2HoWeH4ZNfuIrgduvEqs&sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDgwNzQ0MywiaWF0IjoxNjcwODAwMjQzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc250dnUwNGxsYnFzcDc2cWswcDlrbzMiLCJuYmYiOjE2NzA4MDAyNDMsInRzIjoxNjcwODAwMjQzMTAxMDExfQ.QTGCnDvpKGy7AEyD4UpMn6U2HoWeH4ZNfuIrgduvEqs&sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d HTTP/1.1
Host: mastutorial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mastutorial.com/
Cookie: sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 11 Dec 2022 23:10:43 GMT
location: http://ciar-kep.com/zcvisitor/097bdde2-79a9-11ed-a780-12421175816d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
server: nginx
set-cookie: sid=094e81d8-79a9-11ed-b8c0-8f11dd55c35d; path=/; domain=.mastutorial.com; expires=Sat, 30 Dec 2090 02:24:51 GMT; max-age=2147483647; HttpOnly
ciar-kep.com/zcvisitor/097bdde2-79a9-11ed-a780-12421175816d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
200 1.1 kB URL HTTP/1.1 ciar-kep.com/zcvisitor/097bdde2-79a9-11ed-a780-12421175816d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1deab18eb35d77ec8bebd3ea0537d219
0b964be17b1a3c77b5a8057a7a5f4fff0ddd373a
93641059087acd5df0419bdbb2747f1c731e4c705aeb47d0b51c8089632475e7
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /zcvisitor/097bdde2-79a9-11ed-a780-12421175816d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mastutorial.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 11 Dec 2022 23:10:44 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: kpSCrDVo
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7tN8ozqAabPQz2woD+PV0g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tjh8bb+CnpjltM/ASDr2MxqmDfo=
ciar-kep.com/zcredirect?visitid=097bdde2-79a9-11ed-a780-12421175816d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 1.8 kB URL HTTP/1.1 ciar-kep.com/zcredirect?visitid=097bdde2-79a9-11ed-a780-12421175816d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (850)
Hash 7583aba3903b795991eefe72c34958c8
b8756ab0d1de52af988c56e21080c2e9a9a5e517
8cc199867109b147c85934399380b48254e3a38159d792fb0a8f6f29f5ddbaa8
Analyzer Verdict Alert quad9 Sinkholed
GET /zcredirect?visitid=097bdde2-79a9-11ed-a780-12421175816d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcvisitor/097bdde2-79a9-11ed-a780-12421175816d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 11 Dec 2022 23:10:44 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: AKMELzQl
web.countertrck.com/zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngsskm%2Fno%2Findex-uni.html%3Fcep%3DHRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk%26lptoken%3D162770cc807020e444f5&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=097bdde2-79a9-11ed-a780-12421175816d&cid=&rt=R
302 Found 0 B URL HTTP/2 web.countertrck.com/zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngsskm%2Fno%2Findex-uni.html%3Fcep%3DHRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk%26lptoken%3D162770cc807020e444f5&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=097bdde2-79a9-11ed-a780-12421175816d&cid=&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngsskm%2Fno%2Findex-uni.html%3Fcep%3DHRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk%26lptoken%3D162770cc807020e444f5&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=097bdde2-79a9-11ed-a780-12421175816d&cid=&rt=R HTTP/1.1
Host: web.countertrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ciar-kep.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 11 Dec 2022 23:10:44 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
pragma: no-cache
set-cookie: cep-v4=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk; Max-Age=86400; Expires=Mon, 12-Dec-2022 23:10:44 GMT; Domain=web.countertrck.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ciar-kep.com/favicon.ico
404 653 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcredirect?visitid=097bdde2-79a9-11ed-a780-12421175816d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Sun, 11 Dec 2022 23:10:44 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: GBZCcEJw
www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
200 OK 19 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2104)
Hash 15340cb4eb2770b831147acfbf309ae2
8c7e9bc87e7bab952a0aaa958f1f38153efde7f7
e8323fb09399bd0b01ad075ef2c2ebc9af8155e704f6a7fa1b69e240490751b7
GET /ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5 HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
x-mod-pagespeed: 1.14.36.1-0
cache-control: max-age=0, no-cache, s-maxage=10
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-robots-tag: noindex, noarchive, nosnippet
content-length: 18603
content-type: text/html; charset=UTF-8
date: Sun, 11 Dec 2022 23:10:44 GMT
server: Apache
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/images/NO.png
200 OK 1.2 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/NO.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 50 x 40, 8-bit colormap, non-interlaced\012- data
Hash 1dbbdc570a6ab11660aae86783af4b21
c16bacdbf508f6896d590f482d79ce1e62c2d63a
4c7188a23412702bfc654a613cc7bcb30182265f832d60fbb667b35b1b75d27c
GET /ngsskm/no/images/NO.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 1182
last-modified: Sat, 08 Feb 2020 05:04:31 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-HbvcVwpqsR"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/style.css
200 OK 2.8 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/style.css
IP
ASN #24940 Hetzner Online GmbH
Hash cd4dfdbd77843c1253ea7209570cb047
bc6337064ba083703c97a4d770cb8c2679816520
8cce0dc5aa152c162192f9503a76f454638ef4aa346508d3f961e1775f91b2f5
GET /ngsskm/no/style.css HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 08 Feb 2020 05:04:25 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Tue, 10 Jan 2023 23:10:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-robots-tag: noindex, noarchive, nosnippet
content-length: 2786
content-type: text/css
date: Sun, 11 Dec 2022 23:10:44 GMT
server: Apache
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/images/slot-start.png
200 OK 26 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/slot-start.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /ngsskm/no/images/slot-start.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 26084
last-modified: Sat, 08 Feb 2020 05:04:44 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-9JFkdVbkkt"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 23:10:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
IP
File type ASCII text, with very long lines (32069)
Hash 4ae540714475aa934955496d990ab15f
b7724c4d72a422b86f5dc06571ff4bc86f0308a3
ca0222f8799d862ca8c427d6c612878f47043c9445ad0e1567f1f80e83c965e2
GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30089
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 11:02:32 GMT
expires: Tue, 05 Dec 2023 11:02:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 562093
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 74d82b5960e5e12af402b01fa10b0829
4b80baad99eaafa43a8a78dbcd8e0df4141b3dd7
328abed4a3d2ea1d745c64c5c40925ae5efca25846d2e1c8457a030347473b51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 23:10:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nuggitgames.com/ngsskm/no/images/slot-result-1.png
200 OK 20 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/slot-result-1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /ngsskm/no/images/slot-result-1.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 20370
last-modified: Sat, 08 Feb 2020 05:04:34 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-H70rJuYSNt"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/images/slot-result-2.png
200 OK 27 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/slot-result-2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /ngsskm/no/images/slot-result-2.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 26733
last-modified: Sat, 08 Feb 2020 05:04:37 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-tsoL_qTQzs"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/images/slot-spin.gif
200 OK 88 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/slot-spin.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 410 x 279\012- data
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /ngsskm/no/images/slot-spin.gif HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 87599
last-modified: Sat, 08 Feb 2020 05:04:41 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-YXwWxeBMhg"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/gif
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/red-arrow-right.png
200 OK 1.4 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/red-arrow-right.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /ngsskm/no/red-arrow-right.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 1362
last-modified: Sat, 08 Feb 2020 05:04:23 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-iBvcA3voiV"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/red-arrow-left.png
200 OK 1.3 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/red-arrow-left.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /ngsskm/no/red-arrow-left.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 1334
last-modified: Sat, 08 Feb 2020 05:04:20 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-ktPkgsrOqF"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/images/slot-win.png
200 OK 14 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/images/slot-win.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced\012- data
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /ngsskm/no/images/slot-win.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 14391
last-modified: Sat, 08 Feb 2020 05:04:47 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-k5tqc8ljg6"
date: Sun, 11 Dec 2022 23:10:44 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/alert.ogg
206 Partial Content 6.1 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/alert.ogg
IP
ASN #24940 Hetzner Online GmbH
File type Ogg data, Vorbis audio, mono, 44100 Hz, ~70000 bps, created by: Xiph.Org libVorbis I (1.3.2)\012- data
Hash c24ec40453460f0d5617767016ebc7fe
c360aea4f0d0a34920ddacd376503734142438b9
6c24b85e36500836887748ab5fcfa2663bd6ab39d28f73e75aa5a669bf9386cb
Analyzer Verdict Alert fortinet Phishing
GET /ngsskm/no/alert.ogg HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:11 GMT
accept-ranges: bytes
content-length: 6061
cache-control: max-age=172800, s-maxage=10
expires: Tue, 13 Dec 2022 23:10:45 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-6060/6061
content-type: audio/ogg
date: Sun, 11 Dec 2022 23:10:45 GMT
server: Apache
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/sounds/win.mp3
206 Partial Content 10 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/sounds/win.mp3
IP
ASN #24940 Hetzner Online GmbH
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 32 kbps, 32 kHz, Monaural\012- data
Hash bca40777013dec4a99eaa8b0b98a7fef
bc1c833577a1dcd82ad01a90e82898bc7b47cad7
635e9ee8fcd18bd4c3ae173f00f4c5cbf15ee90a27a302440e2e77c371314176
Analyzer Verdict Alert fortinet Phishing
GET /ngsskm/no/sounds/win.mp3 HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:54 GMT
accept-ranges: bytes
content-length: 10391
cache-control: max-age=172800, s-maxage=10
expires: Tue, 13 Dec 2022 23:10:45 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-10390/10391
content-type: audio/mpeg
date: Sun, 11 Dec 2022 23:10:45 GMT
server: Apache
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/sounds/spin.mp3
206 Partial Content 8.8 kB URL HTTP/2 www.nuggitgames.com/ngsskm/no/sounds/spin.mp3
IP
ASN #24940 Hetzner Online GmbH
File type MPEG ADTS, layer III, v2, 32 kbps, 16 kHz, JntStereo\012- data
Hash 5a2e10964c7fea8b0181831184bc0d97
8f5233dd6be372e7749c6cd8440db5b43de5a9c9
9b8fa3d6ccb98804102ffd59ee70c19e5d7ca7efabbe6c0d4471a1935348ee3d
Analyzer Verdict Alert fortinet Phishing
GET /ngsskm/no/sounds/spin.mp3 HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:51 GMT
accept-ranges: bytes
content-length: 8784
cache-control: max-age=172800, s-maxage=10
expires: Tue, 13 Dec 2022 23:10:45 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-8783/8784
content-type: audio/mpeg
date: Sun, 11 Dec 2022 23:10:45 GMT
server: Apache
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/arrow.png
200 OK 154 B URL HTTP/2 www.nuggitgames.com/ngsskm/no/arrow.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 12 x 12, 4-bit colormap, non-interlaced\012- data
Hash 4daf12b0677dd9ae8923d3154187d1d8
d20e8f0a0c1a72d20cd421ba5e162ff938896e51
5351d7b058d47812c8a2c74bccef9389a11e3df9cd19874d95b7000c8ab9ea9e
GET /ngsskm/no/arrow.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 154
last-modified: Sat, 08 Feb 2020 05:04:13 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:42 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-Ta8SsGd92a"
date: Sun, 11 Dec 2022 23:10:45 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.nuggitgames.com/ngsskm/no/favicon.png
200 OK 805 B URL HTTP/2 www.nuggitgames.com/ngsskm/no/favicon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash 496b2b04c683aa1aee40aea9b8a9bd2b
e248732ed7105d6e618436ed2dad8556239243a1
ac90a1d4eed03e30376b0d3f7529652269e51bc2b0455797cb1acb34941f9ec2
GET /ngsskm/no/favicon.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngsskm/no/index-uni.html?cep=HRqFSqx3I9GAK0_JRsiQ-tlml5IpuqvaWl7XM0c2m9Fnq6TG4UacZ4BXU_LFfrsxQLFv4Mg6Z_WANsuqtxDMvNG6t9PuReRqLkYgfm1aJXoBHy5PSJxtsREuDw-VyyyZaj3iQrCcL03PbvNGVj99mklmlkfQaO76lA0VDmWsXcdhXAeQUo8BYM4ECUNDQoBPW3_0EBVxTCcrHH4Lcai82PcAUd6VTFhfHDt-b8J-SYaVuTTTCMVWfzmDVCz6sehH7QTG-C9VnfupA9tdT4VDfr_yGIb6S4sMCH-zLQSmp_Ssxiw6XwlFeEVdnfXer4SvKCy8PnjAhUjjID8BMCICmQ_vnVUPwrO2OhZ3EQkH9V0zfo-MAkbI5nFa0ICMXG54Zdue7v6cFNelI6DJu0mkzuKA2UinhxK--u9pLHInEcGa0VK08zT1i-Bq5mL6AvGAPgTiAYWCLa8kZHKCxDN00ELhebZkg352L8HT3lvjiLFPdrs41iskNHbhA3pMhsoX5S-6GN8pdJQNLyG0IIvUiVQa1kaNspfK1iKxBraxZuk&lptoken=162770cc807020e444f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 805
last-modified: Sat, 08 Feb 2020 05:04:15 GMT
accept-ranges: bytes
expires: Mon, 11 Dec 2023 03:04:43 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-SWsrBMaDqh"
date: Sun, 11 Dec 2022 23:10:45 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Mon, 12 Dec 2022 00:59:32 GMT
Date: Sun, 11 Dec 2022 23:10:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Mon, 12 Dec 2022 00:59:32 GMT
Date: Sun, 11 Dec 2022 23:10:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Mon, 12 Dec 2022 00:59:32 GMT
Date: Sun, 11 Dec 2022 23:10:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Mon, 12 Dec 2022 00:59:32 GMT
Date: Sun, 11 Dec 2022 23:10:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Mon, 12 Dec 2022 00:59:32 GMT
Date: Sun, 11 Dec 2022 23:10:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86bce3d677c0dd541440ebf38920020d
f11e21b6ad97e07b1d7103ad40a2e158e06fda73
9e23bc16cd1402d9124ebb9e625a5580f677ca9e008d3e04dc95080072fd1df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b1117224-be51-4e21-8b3b-01e5485f0af0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD2yH4loAMFuWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cf8-1382e1a6710239ec629eedb8;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A--8wjYJWCj_JD6eaj3FoD0dLarj6gvH2uQrmsEDLgPwZdQgtUmaoA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "f11e21b6ad97e07b1d7103ad40a2e158e06fda73"
content-type: image/jpeg
age: 4386
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75dd1ecae61b991cd21929deb9244aac
4f14c9f7b36dfa356877251f1e6a0f5936286c4b
3435eda8961bb9954fcf5fd7c957ce58fd7aa4bb9e00525b8f42756adcf341e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6438
x-amzn-requestid: 517b1627-9789-48e8-b5df-106fee878820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENaGN6IAMFoUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d88-28cbd126745e8ab15d937936;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: amWbF9zOStURk7mvKoCOs0babDMecP7hOWzf4Hrn8RGThFiqv-_elg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
age: 4250
etag: "4f14c9f7b36dfa356877251f1e6a0f5936286c4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e259f6cfee2d6c0e6ed8f96667e49d29
e82afaa50d42a9f4f90681c20dfa4b6b0fbf0203
b7c94aa74cbb7477541aee3382a8754b2ece20f647366aab6743fddac2cfbb8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31846d25-a332-413d-b165-920d614e4459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: 6fe7f356-3243-4bd0-b3b4-6a372b0b50be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD7RGx2IAMFk8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d14-0313b6d539d75742114dab10;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:35:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xVD9tE77stQz0W8-59L1GvXaziDHQce7zswS48xfDK9P5m0AXXSjZA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:55:27 GMT
age: 4518
etag: "e82afaa50d42a9f4f90681c20dfa4b6b0fbf0203"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dc3da96-5b77-4fb2-bc43-14a2303cf2ab.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dc3da96-5b77-4fb2-bc43-14a2303cf2ab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df5aef8a4b47db2eff330ac8df5cb601
70b17a00792b42e3ed26d06b92461b2de090f1e5
2c5962564e4e04e58c583b2708e8d8a1c610843fc53a29cc66bf87e6706a57d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dc3da96-5b77-4fb2-bc43-14a2303cf2ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11578
x-amzn-requestid: 3ba66794-67ea-422f-b58b-b9654901c93c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENsFBWoAMF14Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-0fdc76563f14abfd005edaa3;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Xw4kjQs7I3e31bExMBbdJDIIIfXBwTFpDHWBU0Fa4ipYLvHafl__AQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
age: 4250
etag: "70b17a00792b42e3ed26d06b92461b2de090f1e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9049bfa6-9526-4d2e-9da9-c3b1a0e69cb2.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9049bfa6-9526-4d2e-9da9-c3b1a0e69cb2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e99c41e53a999ff2a5eebb77a9799a3
227c059b3203a828486d3fa4f1a72cf5a51eb798
a235d4a432455a28c7682fdb863aff243dfa869c5ea48d4ae96ddd751726d754
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9049bfa6-9526-4d2e-9da9-c3b1a0e69cb2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9286
x-amzn-requestid: adf134d0-2bc6-4abe-9ff8-3b6b4af9e915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENZGVqIAMF6lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d88-34dc2c7d2a721ae10b08749c;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GVgc6WyucAV0u4c1nhULLUyijkRLrolckRYTJyUHvWqDVOoyByEIng==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:55:57 GMT
age: 4488
etag: "227c059b3203a828486d3fa4f1a72cf5a51eb798"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95361d29-1f54-4e09-a474-8c1dad517a28.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95361d29-1f54-4e09-a474-8c1dad517a28.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a85ca34ade4d110c1a003e236440e330
01131ebb7bb94c36c441336dd4a21415be702c80
691205cb45ccec2bb7470b541eb2ffb45b63aec175ea3932ff54e6aa1dd375b8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95361d29-1f54-4e09-a474-8c1dad517a28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9066
x-amzn-requestid: 2e43266d-096b-429b-972f-15886558a84d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENsFgToAMFd2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-22c942d80ac86fb53f742405;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jUzAMkz0SJIT8Cqi0QnElPGp25QQ8hcLr7wPDugzdL2rldwHdhnsEw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:04:40 GMT
age: 3965
etag: "01131ebb7bb94c36c441336dd4a21415be702c80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
77.247.182.244
35.241.9.150
93.184.220.29
18.193.235.10
23.36.76.226