urlquery - report: wildfungames.com/land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
ocsp.digicert.com (5)	86	2012-05-21 07:02:23 UTC	2023-01-30 04:45:19 UTC	93.184.220.29
beevakum.net (2)	156073	2021-02-10 03:56:26 UTC	2023-01-30 08:44:07 UTC	139.45.197.250
wildfungames.com (2)	0	2016-11-21 03:51:35 UTC	2023-01-30 05:10:42 UTC	104.26.5.134	Unknown ranking
r3.o.lencr.org (9)	344	2020-12-02 08:52:13 UTC	2023-01-30 04:09:08 UTC	23.36.76.226
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-30 04:09:03 UTC	35.241.9.150
code.jquery.com (1)	634	2012-05-21 17:28:02 UTC	2023-01-30 04:09:49 UTC	69.16.175.10
ocsp.globalsign.com (1)	2075	2012-05-25 06:20:55 UTC	2023-01-30 04:09:08 UTC	104.18.20.226
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-30 04:11:18 UTC	35.161.100.71
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-30 04:09:18 UTC	34.120.237.76
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-30 04:10:11 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-30 04:10:15 UTC	34.117.237.239
cdn.wildfungames.com (10)	0	2023-01-27 12:57:21 UTC	2023-01-30 05:45:58 UTC	104.26.5.134	Unknown ranking
cdn.jsdelivr.net (2)	439	2012-09-30 00:15:09 UTC	2023-01-30 05:44:43 UTC	151.101.1.229

Scan Date	Severity	Indicator	Comment
2023-01-30	2	cdn.wildfungames.com/land/rou/js2/default1.js?v=1	Malware
2023-01-30	2	cdn.wildfungames.com/land/rou/js2/confetti.js?v=1	Malware
2023-01-30	2	cdn.wildfungames.com/land/rou/js2/winwheel_game.min.js?v=1	Malware
2023-01-30	2	cdn.wildfungames.com/land/rou/css/default.min.css?v=1	Malware

Scan Date	Severity	Indicator	Comment
2023-01-30	2	beevakum.net	Sinkholed
2023-01-30	2	beevakum.net	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-03-25 10:07:30 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	172.67.70.29
2023-03-24 20:15:44 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	172.67.70.29
2023-03-24 19:30:11 +0000	0 - 0 - 5	wildfungames.com/land/rou	172.67.70.29
2023-03-24 18:16:50 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	172.67.70.29
2023-03-24 17:54:34 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	172.67.70.29

Date	UQ / IDS / BL	URL	IP
2023-03-25 16:55:18 +0000	0 - 0 - 6	marinhece.com/sf/tpl38?item=MWL0&source_id=M8 (...)	172.67.134.228
2023-03-25 16:55:10 +0000	0 - 4 - 0	6oqrdh.ayvnuxzc.tk/link_6a341d2	104.21.85.234
2023-03-25 16:54:59 +0000	0 - 55 - 0	sacre.dreama.world	172.67.138.235
2023-03-25 16:54:39 +0000	0 - 0 - 2	t.imilroshoors.com/	172.67.144.187
2023-03-25 16:54:28 +0000	0 - 6 - 0	www.uploadship.com/f2fb28e29b83c409	172.67.155.3

Date	UQ / IDS / BL	URL	IP
2023-03-25 16:13:52 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=ThIi&utm_c (...)	104.26.4.134
2023-03-25 10:07:30 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	172.67.70.29
2023-03-25 07:50:59 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=TREhKw&utm (...)	104.26.5.134
2023-03-25 06:11:52 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=ThIi&utm_c (...)	104.26.4.134
2023-03-25 04:05:41 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=ThIi&utm_c (...)	104.26.4.134

Date	UQ / IDS / BL	URL	IP
2023-03-25 04:05:41 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=ThIi&utm_c (...)	104.26.4.134
2023-03-19 08:15:03 +0000	0 - 0 - 4	wildfungames.com/land/rou?campaign=ThIi&web=1 (...)	172.67.70.29
2023-02-20 07:56:03 +0000	0 - 0 - 1	premiumprizeplace.com/it/tar/sur3box-250/9	104.26.2.153
2023-02-19 18:56:06 +0000	0 - 0 - 2	placebonusextra.com/gb/tar/sur3box-650/15/	104.26.14.156
2023-02-19 18:54:54 +0000	0 - 0 - 1	placebonusextra.com/it/tar/sur3box/291-chrono (...)	172.67.72.193

Request	Response
GET /land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a HTTP/1.1 Host: wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: wildfungames.com/land/rou?campaign=ThIi&web=1&utm_campa (...) FQDN: wildfungames.com IP: 104.26.5.134 HASH: ad2da8d66d75f56f786191b7247f9353f5c3bd64e1ac55542d923c4c7d5dcb4c 104.26.5.134 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Mon, 30 Jan 2023 23:31:44 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600, must-revalidate, public X-Content-Digest: en6808ea70e2581d055522a27d90e29f4b Age: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gWD3fBugiO22cZ7%2BpIh6GrD%2BbXcC13RtpeWGp3FFeOc6%2BTJ5fbloZhJ7mbziToqBa%2BoGiiGY%2FwqKk57tzYnVh9nFdK3cwlN0peHxYr3Qk7djwl5fNOs3mwwbDbWreeDdK0Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bb8df20b4d-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 1509 Md5: d52cbad9a968a5686abe0c58e2b5515e Sha1: fe03c7579f3ac2b511c099f76efa998f56505713 Sha256: ad2da8d66d75f56f786191b7247f9353f5c3bd64e1ac55542d923c4c7d5dcb4c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17286 Expires: Tue, 31 Jan 2023 04:19:50 GMT Date: Mon, 30 Jan 2023 23:31:44 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d2e72d45afe3d391c204b5391599607c Sha1: 149d68b9d00a720b6f380fa2324779dca9dbe26d Sha256: f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E" Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19452 Expires: Tue, 31 Jan 2023 04:55:56 GMT Date: Mon, 30 Jan 2023 23:31:44 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 0c35c3ec659d3a26ea97e68d787bb043 Sha1: d97e3672244efec5b7814f2d8a734cd1a9387854 Sha256: 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 30 Jan 2023 22:43:14 GMT age: 2910 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: dcd75ca6daca51c5e39d431468511793 Sha1: 07f76d3bf23d65c9110d810fa71a994e39e085d3 Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D" Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14734 Expires: Tue, 31 Jan 2023 03:37:18 GMT Date: Mon, 30 Jan 2023 23:31:44 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 302c7548412192add063ad6c8b99cf3b Sha1: e5d178931a27db036ce8daae302594d3ff7050b8 Sha256: fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: EkPFbdt1aw30XSpkPBKZ7mGwr4azY8o8aigRNFTF5Dqxl9FYWwh3W1VMTaZnlB4MKdJmZngTuq+UGz+wu+6OPA== x-amz-request-id: 93EH19BEQBZ5SBRP content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 30 Jan 2023 22:50:56 GMT age: 2448 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 30 Jan 2023 23:31:44 GMT content-length: 12 access-control-allow-credentials: true access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://wildfungames.com Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: code.jquery.com/jquery-3.6.0.min.js FQDN: code.jquery.com IP: 69.16.175.10 HASH: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f 69.16.175.10 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Mon, 30 Jan 2023 23:31:45 GMT content-encoding: gzip content-length: 30875 last-modified: Fri, 20 Aug 2021 17:47:53 GMT accept-ranges: bytes server: nginx etag: W/"611feac9-15d9d" cache-control: max-age=315360000, public access-control-allow-origin: * vary: Accept-Encoding x-hw: 1675121505.dop022.sk1.t,1675121505.cds015.sk1.hn,1675121505.cds210.sk1.c X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 30875 Md5: 899f0189aaf034bbba5340f724d91dfa Sha1: 210ea9de03968edb9d839ba4a0ce2d48666a8ab8 Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2244 Cache-Control: max-age=155896 Date: Mon, 30 Jan 2023 23:31:45 GMT Etag: "63d80895-117" Expires: Wed, 01 Feb 2023 18:50:01 GMT Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: c544df0c6340046f3621ad129f5814db Sha1: 79bae1a9992fa007e64a140c8a1355cd3d6413b2 Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2244 Cache-Control: max-age=155896 Date: Mon, 30 Jan 2023 23:31:45 GMT Etag: "63d80895-117" Expires: Wed, 01 Feb 2023 18:50:01 GMT Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: c544df0c6340046f3621ad129f5814db Sha1: 79bae1a9992fa007e64a140c8a1355cd3d6413b2 Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc
GET /land/rou/js2/default1.js?v=1 HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/js2/default1.js?v=1 FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: de0e3ca83bb57b6c72a0653de7103346f4a266dbcf79d3af2547c09a6cdabd43 104.26.5.134 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"cb6fb41521eaa67073568b2a55d1f30b" Last-Modified: Fri, 27 Jan 2023 19:45:44 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifYduYTel5OYO78NeHq1ePxjyuZR7PvdAugfei207iyvAkRzDvHJwcio%2Bbd%2B8NwiKbcM1THlNXhqV02DWxl%2BcSMg0d3X22CzlrD97U5J2eQOrX7k8HprydXX8uM%2F3HtuUfHq219p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bed9a0b4e8-OSL Content-Encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: ASCII text Size: 708 Md5: 868539b299e3d222198ce4584bff42d5 Sha1: 92281f722de18aec454f3655779bdbbcdfaff707 Sha256: de0e3ca83bb57b6c72a0653de7103346f4a266dbcf79d3af2547c09a6cdabd43 Alerts: Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6198 Cache-Control: 'max-age=158059' Date: Mon, 30 Jan 2023 23:31:45 GMT Etag: "63d6b717-116" Last-Modified: Mon, 30 Jan 2023 21:48:27 GMT Server: ECS (amb/6B76) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: c544df0c6340046f3621ad129f5814db Sha1: 79bae1a9992fa007e64a140c8a1355cd3d6413b2 Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 13 Cache-Control: max-age=153665 Date: Mon, 30 Jan 2023 23:31:45 GMT Etag: "63d80895-117" Expires: Wed, 01 Feb 2023 18:12:50 GMT Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT Server: ECS (amb/6BAE) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: c544df0c6340046f3621ad129f5814db Sha1: 79bae1a9992fa007e64a140c8a1355cd3d6413b2 Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc
GET /land/rou/js2/confetti.js?v=1 HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/js2/confetti.js?v=1 FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: d25b51238af48538cd3ef9d80712e04f751c882efd7b70e41ce7c719bfe2e5c6 104.26.5.134 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"594e7bd784c66babe7dd35e2cf498f14" Last-Modified: Fri, 27 Jan 2023 19:45:44 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UydU5Wym1RS%2FeLOca0Pyhri7NzllZccg5Dmh63BQJFZv2w6uhgql02ck2b7z9IttEX48VAwDyaXgpYEukRyzI9gCjeCzEmOmNVPpU3rMY%2BYPmvnl8vN02g6W2J4cmknXNZ3X9%2B0C"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00beefd3b506-OSL Content-Encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: ASCII text Size: 1861 Md5: 2526419743133ede6a0b7ea45e33d563 Sha1: 3b66e3ff3ff840449cc5b5e40aafc8008b15e9ea Sha256: d25b51238af48538cd3ef9d80712e04f751c882efd7b70e41ce7c719bfe2e5c6 Alerts: Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 477 Cache-Control: max-age=154129 Date: Mon, 30 Jan 2023 23:31:45 GMT Etag: "63d80895-117" Expires: Wed, 01 Feb 2023 18:20:34 GMT Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT Server: ECS (amb/6BB3) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: c544df0c6340046f3621ad129f5814db Sha1: 79bae1a9992fa007e64a140c8a1355cd3d6413b2 Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://wildfungames.com Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap. (...) FQDN: cdn.jsdelivr.net IP: 151.101.1.229 HASH: 5ae018daf5df2cd903f80162efbaa3e138e0ed47ff90a315f2e2c497dc88a890 151.101.1.229 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 4.6.0 x-jsd-version-type: version etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk" content-encoding: gzip accept-ranges: bytes date: Mon, 30 Jan 2023 23:31:45 GMT age: 20810149 x-served-by: cache-fra19162-FRA, cache-bma1648-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 21830 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65299) Size: 21830 Md5: a5cbb97cf034dd181106adecdafe3035 Sha1: 5fca1af6c76dd3e609f7f92841e564df1281927a Sha256: 5ae018daf5df2cd903f80162efbaa3e138e0ed47ff90a315f2e2c497dc88a890
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://wildfungames.com Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap (...) FQDN: cdn.jsdelivr.net IP: 151.101.1.229 HASH: 9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73 151.101.1.229 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 4.6.0 x-jsd-version-type: version etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34" content-encoding: gzip accept-ranges: bytes date: Mon, 30 Jan 2023 23:31:45 GMT age: 11578280 x-served-by: cache-fra19147-FRA, cache-bma1648-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 24100 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65326) Size: 24100 Md5: 849f3e827da80e4e4c6a8c49689f057d Sha1: 035d81aaaf6da3ffa5ce241179a9e14d533e7a3b Sha256: 9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73
GET /land/rou/js2/propeller.min.js?v=1 HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/js2/propeller.min.js?v=1 FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 4fa34a85b0ee0d3daa6988527b7b6a4d9eccd493f54a96f7e0a05fa0d5d1130d 104.26.5.134 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"20ff2d103a051f36069225e9bb9c87c0" Last-Modified: Fri, 27 Jan 2023 19:45:45 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=upTQS7PF4q2A%2FKhqo1ek6yLt%2Fisq2yHOpTgPphmSB1DdlvQ9PoRHIzudh%2FChYv1Hhh4fTkEBLI%2B0ViXZ%2Bp0mKoAp5UP5Couyuxt46RPxYDb72XvevEdwQSO740ZcGm09z%2FdH1Eoh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf1e4c0b39-OSL Content-Encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: ASCII text, with very long lines (11334), with no line terminators Size: 3377 Md5: 2e5fd92be5b702ec0be7b381c2c76e49 Sha1: 7fc09db77b67cf82285a2eaf52b7d2a126893663 Sha256: 4fa34a85b0ee0d3daa6988527b7b6a4d9eccd493f54a96f7e0a05fa0d5d1130d
GET /land/rou/js2/winwheel_game.min.js?v=1 HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/js2/winwheel_game.min.js?v=1 FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 6b06ad34e47a22c70eddc60bd007de63dfe2928a1323c3e85cb76ef7c574f082 104.26.5.134 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"93ae375d5794d7efc5759847e616b870" Last-Modified: Fri, 27 Jan 2023 19:45:45 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kQifXczwHnjiUydl1xl7j6SLtW%2FEhOhcNTUusqBkv7lwipjIOuZrTz8xpB5G0PYZX0lnzclm5usD9a0hYTY0TKdRisql5b8mmsWDf48EPum%2Fk6U%2BylZcCgtmEMZ3qPDUzbGgBJGq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf1abbb509-OSL Content-Encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: ASCII text, with very long lines (3694), with no line terminators Size: 1360 Md5: e8b1f90201cd46bfd3dc724c717a33e1 Sha1: 739f1e9d9673d2aa6e4de5bf0b46103854d6bda2 Sha256: 6b06ad34e47a22c70eddc60bd007de63dfe2928a1323c3e85cb76ef7c574f082 Alerts: Blocklists: - fortinet: Malware
GET /land/rou/css/default.min.css?v=1 HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/css/default.min.css?v=1 FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 37c84a700f1e1ab7ca47ca811bc68176960ba1d7dee78c28eea3059b75d6d9ae 104.26.5.134 HTTP/1.1 200 OK Content-Type: text/css Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"c87a79b32fd06185ea1eabe4af153677" Last-Modified: Fri, 27 Jan 2023 20:13:29 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DR6Nfsekc4dz1PymyX31lRB%2BiDmTzrAlT%2FSwG5ugIWopRBgB6CWSQJxHFh0M1vPPnBaRcn1PL0CMcxs7SVNPefNMS7r9ecvRE8bsDZoO6rn19yBnMODX0PogQc5fyc90JiD0xL1m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf1c93b529-OSL Content-Encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: ASCII text, with very long lines (4431), with no line terminators Size: 1248 Md5: 50330b27ab37012510258b86786ba759 Sha1: 30323f5a2fed4be78741ed7d6be027fcdc7ad19d Sha256: 37c84a700f1e1ab7ca47ca811bc68176960ba1d7dee78c28eea3059b75d6d9ae Alerts: Blocklists: - fortinet: Malware
GET /land/rou/img/spin_Roulette03.png HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/img/spin_Roulette03.png FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 9e860a039b138a3e94b704ff4aae7896c678d88d3c5e1ab2d08e3af5ceecdee6 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Jan 2023 23:31:45 GMT Content-Length: 1316 Connection: keep-alive ETag: "5e45d498bdb0b010e058b92e5d5097ac" Last-Modified: Fri, 27 Jan 2023 12:51:53 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRrfl1UN2FDKwrwOqhLNfBcauMwtIFJtiQsjRRUiUxnJcUCOM37x6Paoq56fF89h%2BsRvcUPxEPqyKErqgzlK99irIQ83%2BT7xoV1l6XI3oaSGp9hKo8kq%2FOlnZYpzR%2FnA1%2Fm4tUjA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf5823b506-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: PNG image data, 269 x 138, 8-bit/color RGBA, non-interlaced\012- data Size: 1316 Md5: 5e45d498bdb0b010e058b92e5d5097ac Sha1: 8a1b41ef4c12fc85b4e4c7d28e3fcf48774054f7 Sha256: 9e860a039b138a3e94b704ff4aae7896c678d88d3c5e1ab2d08e3af5ceecdee6
GET /land/rou/img/spin_Roulette00.png HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/img/spin_Roulette00.png FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 589d62b11a4171fb3a9b7c97b6963447601e36f8c2dcb36370dce75f5bd9687e 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Jan 2023 23:31:45 GMT Content-Length: 12991 Connection: keep-alive ETag: "834a8095777aee926381dd13a5a8b3ab" Last-Modified: Fri, 27 Jan 2023 12:51:51 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=exDszWikubv8kzsH%2FtHnvvzqT9UiIPsGQXVMFqOw39CE%2FaqmXQ%2B5u4d2FeDlTfzyOKdr1UNPOGN6bKBY8AWHptPWSPvEGc9Y2jUBrAH6eai7b0bevekFXuneWyYjwLhI6yAKTLKR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf5e790b39-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: PNG image data, 170 x 190, 8-bit/color RGBA, non-interlaced\012- data Size: 12991 Md5: 834a8095777aee926381dd13a5a8b3ab Sha1: c0f06099eea950232f33e02355d84dda44a6e35e Sha256: 589d62b11a4171fb3a9b7c97b6963447601e36f8c2dcb36370dce75f5bd9687e
GET /land/rou/img/spin_Roulette01.png HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/img/spin_Roulette01.png FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: a0c05360734297aae902dc48ed95cd7d3d3f818897f111c54aae6f042428b665 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Jan 2023 23:31:45 GMT Content-Length: 43403 Connection: keep-alive ETag: "6e422805365b1b64d8da6b0d29ae8c69" Last-Modified: Fri, 27 Jan 2023 12:51:52 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCDvBk4UEPOF4g67RP%2FsblUz6GzmE0xztEqlxbn9vzgFvhnuVQ9n3ONQjjmVZnCcp7hPziVxIclBRrroKvA%2BzhAbMPtaMAMaF5oX9AAUCTxQNMPUlTQIINeKVkIBzFLLu24rN5TK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf5afab509-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: PNG image data, 540 x 540, 8-bit colormap, non-interlaced\012- data Size: 43403 Md5: 6e422805365b1b64d8da6b0d29ae8c69 Sha1: 37d523943fb63f409cd9a6da32fb5d7663a692da Sha256: a0c05360734297aae902dc48ed95cd7d3d3f818897f111c54aae6f042428b665
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 3ab61770726efaafd4eae8308dbd9df9fb8c40f88d6cea2de491862537fcd295 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive Etag: "6794BB470A7241D122DFF9AC470651EFEFFAE067" Expires: Tue, 31 Jan 2023 10:00:00 GMT Last-Modified: Mon, 30 Jan 2023 22:00:00 UTC Cache-Control: s-maxage=3600, public, no-transform, must-revalidate CF-Cache-Status: HIT Age: 2492 Vary: Accept-Encoding Server: cloudflare CF-RAY: 791e00bf78111c0e-OSL --- Additional Info --- Magic: data Size: 1462 Md5: 55842c45a4e5f3d2e99daf31e4c5479e Sha1: 20cf54099697b8a37fcf4d0bab7fb886cd021d58 Sha256: 3ab61770726efaafd4eae8308dbd9df9fb8c40f88d6cea2de491862537fcd295
GET /land/rou/img/spin_bg_desk.png HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/img/spin_bg_desk.png FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: da07ed253e14bcf56880e11d0eddb2276a7da9b4f679d49fb17976b97b81172b 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Jan 2023 23:31:45 GMT Content-Length: 110359 Connection: keep-alive ETag: "eafcb5a49ddbee590cfe266b1b0c8820" Last-Modified: Fri, 27 Jan 2023 14:03:36 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7XjqIigm5Yq339Eu68BvYpzOkyianf6OCb95tSwbQyg0riHLaMB3SDtzNbFsgB5H%2Fju%2BySuEtuOAa47foQgnR6WHsIoabyqPviS0uwcyN9KqlIEWAH0JjS2AojxSX4vj02QI0XXH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bf9b29b509-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: PNG image data, 870 x 650, 8-bit colormap, non-interlaced\012- data Size: 110359 Md5: eafcb5a49ddbee590cfe266b1b0c8820 Sha1: 254de127e096c137b1a8c8e62cf3c96b7c6492e5 Sha256: da07ed253e14bcf56880e11d0eddb2276a7da9b4f679d49fb17976b97b81172b
GET /land/rou/img/spin_Roulette02.png HTTP/1.1 Host: cdn.wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.wildfungames.com/land/rou/img/spin_Roulette02.png FQDN: cdn.wildfungames.com IP: 104.26.5.134 HASH: 673f4069c0d4e4e256cd84e482cfc0e60fa76547aa6f62578b3f47c60299d4c1 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Jan 2023 23:31:45 GMT Content-Length: 35051 Connection: keep-alive ETag: "320aa52aa7ccfde051920d20967e0baa" Last-Modified: Fri, 27 Jan 2023 14:03:35 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 20 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BKfm7S0di%2Fn94q7idX5OMu1nrCApddDVw0yUcemtsIl0XGbMMJg81PvoH%2FQrRAejYAZiBTPfacsPylZnVXRemekd02ipqzKRbm604KF3phJ2Q%2Fo6G7TWl3pYzinU71Q6zBc4JcY2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 791e00bfeb4bb509-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 --- Additional Info --- Magic: PNG image data, 434 x 434, 8-bit colormap, non-interlaced\012- data Size: 35051 Md5: 320aa52aa7ccfde051920d20967e0baa Sha1: 7a6dc94d3aa311664e94d1259322f081b2f074f7 Sha256: 673f4069c0d4e4e256cd84e482cfc0e60fa76547aa6f62578b3f47c60299d4c1
GET /pfe/current/micro.tag.min.js?z=5578843&sw=/sw-check-permissions-cb761.js HTTP/1.1 Host: beevakum.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wildfungames.com/	URL: beevakum.net/pfe/current/micro.tag.min.js?z=5578843&sw= (...) FQDN: beevakum.net IP: 139.45.197.250 HASH: 8b9b2a4d4da7ff539e51c4bb298f0587b0c14ed4158294bfa003cb8b6893d1dc 139.45.197.250 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Mon, 30 Jan 2023 23:31:45 GMT Last-Modified: Fri, 27 Jan 2023 11:03:52 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63d3af98-a083" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: C source, ASCII text, with very long lines (41091), with no line terminators Size: 14496 Md5: 002d32199f9116c7429c84ef9d7849bb Sha1: 328e4f6b8bdfb247e311b58cddab5eaa21d5b4e3 Sha256: 8b9b2a4d4da7ff539e51c4bb298f0587b0c14ed4158294bfa003cb8b6893d1dc Alerts: Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: acf684db9c614739975c319c5388cffe6207cf7914bcc58ae0687e3284d54657 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "ACF684DB9C614739975C319C5388CFFE6207CF7914BCC58AE0687E3284D54657" Last-Modified: Sun, 29 Jan 2023 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4648 Expires: Tue, 31 Jan 2023 00:49:13 GMT Date: Mon, 30 Jan 2023 23:31:45 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ae21e024ce2ce820a35f134735ac2cde Sha1: fe4c1f1c138e3b0f91e24c4cc02a8a15cb56f69a Sha256: acf684db9c614739975c319c5388cffe6207cf7914bcc58ae0687e3284d54657
GET /favicon.ico HTTP/1.1 Host: wildfungames.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wildfungames.com/land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a	URL: wildfungames.com/favicon.ico FQDN: wildfungames.com IP: 104.26.5.134 HASH: 03901e6846adfc7d2216e031eab780e4605c70d24af897afda998c40b53a3d30 104.26.5.134 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Mon, 30 Jan 2023 23:31:45 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 27 Jan 2023 20:16:00 GMT ETag: W/"63d43100-96" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjsgiXhW0lt%2BOgivlMS6h3G8kDk5ysXvw76dcjD25ZIoCtocCnPQBVHt%2FwDlsl4Uz%2BdmLWGuKLplER6zsuK0fp0sxKoz7nJaEScHb3obWElc3rRSWF7%2FUsgedlX%2FQY8y8XA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 791e00c038050b4d-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: MS Windows icon resource - 2 icons, 1x1, 2 colors, 1x1, 2 colors\012- data Size: 62 Md5: 70515ac92cadd905fa8fecef584d0083 Sha1: c50b7f0f44d82b3f7dc4aff73145371232b0f703 Sha256: 03901e6846adfc7d2216e031eab780e4605c70d24af897afda998c40b53a3d30
POST /zone?&pub=0&zone_id=5578843&is_mobile=false&domain=wildfungames.com&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1 Host: beevakum.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://wildfungames.com Connection: keep-alive Referer: http://wildfungames.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0	URL: beevakum.net/zone?&pub=0&zone_id=5578843&is_mobile=fals (...) FQDN: beevakum.net IP: 139.45.197.250 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 139.45.197.250 HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 23:31:45 GMT content-length: 0 x-trace-id: 5ae6bbf5796962764136208f9980cf5e access-control-allow-origin: http://wildfungames.com access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept strict-transport-security: max-age=1 x-content-type-options: nosniff X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - quad9: Sinkholed
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 30 Jan 2023 22:49:04 GMT age: 2561 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E" Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17945 Expires: Tue, 31 Jan 2023 04:30:50 GMT Date: Mon, 30 Jan 2023 23:31:45 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 22b9916fc1fafc9bdc9bb37f9eac8a9a Sha1: 86f640e134a741a0f906a8e3a0f5c6659dd0e394 Sha256: a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: y0ovmvvpRQ+O8SE7hYx9Bg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.161.100.71 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.161.100.71 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: u/cp5XROciQzMGDTviEsuBXaN1I= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14369 Expires: Tue, 31 Jan 2023 03:31:16 GMT Date: Mon, 30 Jan 2023 23:31:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dfb84426fed94988d5c90372baff059c Sha1: f1c4740830034ff8a5759d59ae3f657ea524d083 Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14369 Expires: Tue, 31 Jan 2023 03:31:16 GMT Date: Mon, 30 Jan 2023 23:31:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dfb84426fed94988d5c90372baff059c Sha1: f1c4740830034ff8a5759d59ae3f657ea524d083 Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14369 Expires: Tue, 31 Jan 2023 03:31:16 GMT Date: Mon, 30 Jan 2023 23:31:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dfb84426fed94988d5c90372baff059c Sha1: f1c4740830034ff8a5759d59ae3f657ea524d083 Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14369 Expires: Tue, 31 Jan 2023 03:31:16 GMT Date: Mon, 30 Jan 2023 23:31:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dfb84426fed94988d5c90372baff059c Sha1: f1c4740830034ff8a5759d59ae3f657ea524d083 Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7550d034-a90a-434b-9fea-868c8c7b245c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d505f682650fcacc557eb821a055b0e6c61f4d2aa2c5d8f3b595a2d240335b55 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5678 x-amzn-requestid: 7fdf597d-0f02-48ef-9059-04d99a0d5dae x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ffy4JFm8IAMFjJQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d631cd-6044076459b6b9815fbfbe9c;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 08:43:57 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: w1OY-d-PqtQ6UnIIdLhYkvNlm6CSImBXYdQFkhBlweSIDxDaT5FdYQ== via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 21:59:01 GMT age: 5566 etag: "00b899160598d98b5026d4b53814b16d3f745b14" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5678 Md5: da3305c255098d7a3ae582b5962ba14c Sha1: 00b899160598d98b5026d4b53814b16d3f745b14 Sha256: d505f682650fcacc557eb821a055b0e6c61f4d2aa2c5d8f3b595a2d240335b55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10898 x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fk3zxGshIAMFw5Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0 x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 21:48:21 GMT age: 6206 etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10898 Md5: 4a2d26da68a313cc65958fc2692351c2 Sha1: 798c3538f3147ca77d317676ddd1bf040bd0f93b Sha256: 76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9600 x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fVsWcFN7IAMF2pg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0 x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 01:57:09 GMT age: 77678 etag: "7da46843b6d885f38a4759a08e6c899906ab7b97" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9600 Md5: 3366ef4f8733cb9c89a5c88f63a0a441 Sha1: 7da46843b6d885f38a4759a08e6c899906ab7b97 Sha256: 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd37b27-1930-4380-aa34-e533abb33eaa.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d1a2caf59c5bfb3fd66c804217c60705de91e5beebd006cffab1d712a5aef85b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8755 x-amzn-requestid: 18054ad3-92df-4a07-b7d1-643293ba4a5f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fR1hDGZfoAMFsFw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d09c6c-7aae5ef32459231c25465b1b;Sampled=0 x-amzn-remapped-date: Wed, 25 Jan 2023 03:05:17 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 5GkQA5AcFOFc2Wn5rdaX7nH5F4wfy52vtlpbI8Qlai-jQE77inKzqA== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 10:06:07 GMT age: 48340 etag: "c9e939eea5ca410e2ac3e2c93fb9cdf51fd3a03e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8755 Md5: 146cb1c622ae62d62090dcaf81709056 Sha1: c9e939eea5ca410e2ac3e2c93fb9cdf51fd3a03e Sha256: d1a2caf59c5bfb3fd66c804217c60705de91e5beebd006cffab1d712a5aef85b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a38348b-ed70-4e2f-80ce-d13e44fefcfc.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: aba708124199ec6b0ce86ac14c6c18d233ff405071a7f22522217c2fcb0aa9b7 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13557 x-amzn-requestid: 981a0f31-e874-4392-a81d-12d667020700 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fH8-JGEsoAMFhZA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cca85a-7398031f2676734c65447e5b;Sampled=0 x-amzn-remapped-date: Sun, 22 Jan 2023 03:07:06 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: FyAjKljyMSyfuIALULEbba8rfn71egrWLza3UND5qKFtT8M0xKJNrA== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 22:02:12 GMT age: 5375 etag: "a1fa1355f4de6f246d35bed9f128e13fc9dc4e72" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13557 Md5: 7b596a8e984911df703e15c72d25d513 Sha1: a1fa1355f4de6f246d35bed9f128e13fc9dc4e72 Sha256: aba708124199ec6b0ce86ac14c6c18d233ff405071a7f22522217c2fcb0aa9b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8558 x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ffB_BFA8IAMFyvA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ZP2Mar8l3QoPH733_vv3hUuQjWvaN4_TgfYwme2-6WIxGi55BoSchg== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google date: Mon, 30 Jan 2023 03:24:10 GMT age: 72457 etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8558 Md5: e6f9ffb8f9e99229b45ca5fdb84ce7d5 Sha1: 04577ad69ee9749b14382254eb5bbf0e1edcd7fa Sha256: 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2

                                        
                                            GET /land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a HTTP/1.1 

                                        
                                            
Host: wildfungames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         104.26.5.134

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:44 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: max-age=3600, must-revalidate, public 

                                        
                                            
X-Content-Digest: en6808ea70e2581d055522a27d90e29f4b 

                                        
                                            
Age: 0 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gWD3fBugiO22cZ7%2BpIh6GrD%2BbXcC13RtpeWGp3FFeOc6%2BTJ5fbloZhJ7mbziToqBa%2BoGiiGY%2FwqKk57tzYnVh9nFdK3cwlN0peHxYr3Qk7djwl5fNOs3mwwbDbWreeDdK0Y%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 791e00bb8df20b4d-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   1509

                                                Md5:    d52cbad9a968a5686abe0c58e2b5515e

                                                Sha1:   fe03c7579f3ac2b511c099f76efa998f56505713

                                                Sha256: ad2da8d66d75f56f786191b7247f9353f5c3bd64e1ac55542d923c4c7d5dcb4c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E" 

                                        
                                            
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=19452 

                                        
                                            
Expires: Tue, 31 Jan 2023 04:55:56 GMT 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:44 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    0c35c3ec659d3a26ea97e68d787bb043

                                                Sha1:   d97e3672244efec5b7814f2d8a734cd1a9387854

                                                Sha256: 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D" 

                                        
                                            
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=14734 

                                        
                                            
Expires: Tue, 31 Jan 2023 03:37:18 GMT 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:44 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    302c7548412192add063ad6c8b99cf3b

                                                Sha1:   e5d178931a27db036ce8daae302594d3ff7050b8

                                                Sha256: fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 30 Jan 2023 23:31:44 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2244 

                                        
                                            
Cache-Control: max-age=155896 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Etag: "63d80895-117" 

                                        
                                            
Expires: Wed, 01 Feb 2023 18:50:01 GMT 

                                        
                                            
Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT 

                                        
                                            
Server: ECS (ska/F71B) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    c544df0c6340046f3621ad129f5814db

                                                Sha1:   79bae1a9992fa007e64a140c8a1355cd3d6413b2

                                                Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 13 

                                        
                                            
Cache-Control: max-age=153665 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Etag: "63d80895-117" 

                                        
                                            
Expires: Wed, 01 Feb 2023 18:12:50 GMT 

                                        
                                            
Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT 

                                        
                                            
Server: ECS (amb/6BAE) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    c544df0c6340046f3621ad129f5814db

                                                Sha1:   79bae1a9992fa007e64a140c8a1355cd3d6413b2

                                                Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 477 

                                        
                                            
Cache-Control: max-age=154129 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Etag: "63d80895-117" 

                                        
                                            
Expires: Wed, 01 Feb 2023 18:20:34 GMT 

                                        
                                            
Last-Modified: Mon, 30 Jan 2023 18:12:37 GMT 

                                        
                                            
Server: ECS (amb/6BB3) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    c544df0c6340046f3621ad129f5814db

                                                Sha1:   79bae1a9992fa007e64a140c8a1355cd3d6413b2

                                                Sha256: 5315cdc28c0351361cfe6e98d354451e9332f6060036182e85d4396d40be26dc

                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 

                                        
                                            
Host: cdn.jsdelivr.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: http://wildfungames.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wildfungames.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         151.101.1.229

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css; charset=utf-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: * 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cache-control: public, max-age=31536000, s-maxage=31536000, immutable 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains; preload 

                                        
                                            
x-jsd-version: 4.6.0 

                                        
                                            
x-jsd-version-type: version 

                                        
                                            
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
age: 11578280 

                                        
                                            
x-served-by: cache-fra19147-FRA, cache-bma1648-BMA 

                                        
                                            
x-cache: HIT, HIT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 

                                        
                                            
content-length: 24100 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65326)

                                                Size:   24100

                                                Md5:    849f3e827da80e4e4c6a8c49689f057d

                                                Sha1:   035d81aaaf6da3ffa5ce241179a9e14d533e7a3b

                                                Sha256: 9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73

                                        
                                            GET /land/rou/img/spin_Roulette03.png HTTP/1.1 

                                        
                                            
Host: cdn.wildfungames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wildfungames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.26.5.134

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Content-Length: 1316 

                                        
                                            
Connection: keep-alive 

                                        
                                            
ETag: "5e45d498bdb0b010e058b92e5d5097ac" 

                                        
                                            
Last-Modified: Fri, 27 Jan 2023 12:51:53 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 20 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRrfl1UN2FDKwrwOqhLNfBcauMwtIFJtiQsjRRUiUxnJcUCOM37x6Paoq56fF89h%2BsRvcUPxEPqyKErqgzlK99irIQ83%2BT7xoV1l6XI3oaSGp9hKo8kq%2FOlnZYpzR%2FnA1%2Fm4tUjA"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 791e00bf5823b506-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 269 x 138, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   1316

                                                Md5:    5e45d498bdb0b010e058b92e5d5097ac

                                                Sha1:   8a1b41ef4c12fc85b4e4c7d28e3fcf48774054f7

                                                Sha256: 9e860a039b138a3e94b704ff4aae7896c678d88d3c5e1ab2d08e3af5ceecdee6

                                        
                                            GET /land/rou/img/spin_Roulette01.png HTTP/1.1 

                                        
                                            
Host: cdn.wildfungames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wildfungames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.26.5.134

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Content-Length: 43403 

                                        
                                            
Connection: keep-alive 

                                        
                                            
ETag: "6e422805365b1b64d8da6b0d29ae8c69" 

                                        
                                            
Last-Modified: Fri, 27 Jan 2023 12:51:52 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 20 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCDvBk4UEPOF4g67RP%2FsblUz6GzmE0xztEqlxbn9vzgFvhnuVQ9n3ONQjjmVZnCcp7hPziVxIclBRrroKvA%2BzhAbMPtaMAMaF5oX9AAUCTxQNMPUlTQIINeKVkIBzFLLu24rN5TK"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 791e00bf5afab509-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 540 x 540, 8-bit colormap, non-interlaced\012- data

                                                Size:   43403

                                                Md5:    6e422805365b1b64d8da6b0d29ae8c69

                                                Sha1:   37d523943fb63f409cd9a6da32fb5d7663a692da

                                                Sha256: a0c05360734297aae902dc48ed95cd7d3d3f818897f111c54aae6f042428b665

                                        
                                            GET /land/rou/img/spin_bg_desk.png HTTP/1.1 

                                        
                                            
Host: cdn.wildfungames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wildfungames.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.26.5.134

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Content-Length: 110359 

                                        
                                            
Connection: keep-alive 

                                        
                                            
ETag: "eafcb5a49ddbee590cfe266b1b0c8820" 

                                        
                                            
Last-Modified: Fri, 27 Jan 2023 14:03:36 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 20 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7XjqIigm5Yq339Eu68BvYpzOkyianf6OCb95tSwbQyg0riHLaMB3SDtzNbFsgB5H%2Fju%2BySuEtuOAa47foQgnR6WHsIoabyqPviS0uwcyN9KqlIEWAH0JjS2AojxSX4vj02QI0XXH"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 791e00bf9b29b509-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 870 x 650, 8-bit colormap, non-interlaced\012- data

                                                Size:   110359

                                                Md5:    eafcb5a49ddbee590cfe266b1b0c8820

                                                Sha1:   254de127e096c137b1a8c8e62cf3c96b7c6492e5

                                                Sha256: da07ed253e14bcf56880e11d0eddb2276a7da9b4f679d49fb17976b97b81172b

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: wildfungames.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wildfungames.com/land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a

                                         104.26.5.134

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/x-icon

                                        

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:45 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 27 Jan 2023 20:16:00 GMT 

                                        
                                            
ETag: W/"63d43100-96" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: REVALIDATED 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjsgiXhW0lt%2BOgivlMS6h3G8kDk5ysXvw76dcjD25ZIoCtocCnPQBVHt%2FwDlsl4Uz%2BdmLWGuKLplER6zsuK0fp0sxKoz7nJaEScHb3obWElc3rRSWF7%2FUsgedlX%2FQY8y8XA%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 791e00c038050b4d-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  MS Windows icon resource - 2 icons, 1x1, 2 colors, 1x1, 2 colors\012- data

                                                Size:   62

                                                Md5:    70515ac92cadd905fa8fecef584d0083

                                                Sha1:   c50b7f0f44d82b3f7dc4aff73145371232b0f703

                                                Sha256: 03901e6846adfc7d2216e031eab780e4605c70d24af897afda998c40b53a3d30

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 30 Jan 2023 22:49:04 GMT 

                                        
                                            
age: 2561 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: y0ovmvvpRQ+O8SE7hYx9Bg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.161.100.71

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: u/cp5XROciQzMGDTviEsuBXaN1I= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" 

                                        
                                            
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=14369 

                                        
                                            
Expires: Tue, 31 Jan 2023 03:31:16 GMT 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    dfb84426fed94988d5c90372baff059c

                                                Sha1:   f1c4740830034ff8a5759d59ae3f657ea524d083

                                                Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" 

                                        
                                            
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=14369 

                                        
                                            
Expires: Tue, 31 Jan 2023 03:31:16 GMT 

                                        
                                            
Date: Mon, 30 Jan 2023 23:31:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    dfb84426fed94988d5c90372baff059c

                                                Sha1:   f1c4740830034ff8a5759d59ae3f657ea524d083

                                                Sha256: d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10898 

                                        
                                            
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fk3zxGshIAMFw5Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ== 

                                        
                                            
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 30 Jan 2023 21:48:21 GMT 

                                        
                                            
age: 6206 

                                        
                                            
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10898

                                                Md5:    4a2d26da68a313cc65958fc2692351c2

                                                Sha1:   798c3538f3147ca77d317676ddd1bf040bd0f93b

                                                Sha256: 76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd37b27-1930-4380-aa34-e533abb33eaa.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8755 

                                        
                                            
x-amzn-requestid: 18054ad3-92df-4a07-b7d1-643293ba4a5f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fR1hDGZfoAMFsFw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d09c6c-7aae5ef32459231c25465b1b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 25 Jan 2023 03:05:17 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: 5GkQA5AcFOFc2Wn5rdaX7nH5F4wfy52vtlpbI8Qlai-jQE77inKzqA== 

                                        
                                            
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 30 Jan 2023 10:06:07 GMT 

                                        
                                            
age: 48340 

                                        
                                            
etag: "c9e939eea5ca410e2ac3e2c93fb9cdf51fd3a03e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8755

                                                Md5:    146cb1c622ae62d62090dcaf81709056

                                                Sha1:   c9e939eea5ca410e2ac3e2c93fb9cdf51fd3a03e

                                                Sha256: d1a2caf59c5bfb3fd66c804217c60705de91e5beebd006cffab1d712a5aef85b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8558 

                                        
                                            
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ffB_BFA8IAMFyvA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: ZP2Mar8l3QoPH733_vv3hUuQjWvaN4_TgfYwme2-6WIxGi55BoSchg== 

                                        
                                            
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 30 Jan 2023 03:24:10 GMT 

                                        
                                            
age: 72457 

                                        
                                            
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8558

                                                Md5:    e6f9ffb8f9e99229b45ca5fdb84ce7d5

                                                Sha1:   04577ad69ee9749b14382254eb5bbf0e1edcd7fa

                                                Sha256: 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2

URL	wildfungames.com/land/rou?campaign=ThIi&web=1&utm_campaign=plc0f15a98e14f6790420cab4cc1976a
IP	172.67.70.29 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-30 23:31:55 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	6
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.70.29

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: wildfungames.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.70.29

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: wildfungames.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Network Intrusion Detection Systems