| deebcards-themier.com/2abe61a2-512d-4111-8b91-18300e8a493f/2 | 52.57.25.237 | 200 | 664 B |
URL HTTP/1.1deebcards-themier.com/2abe61a2-512d-4111-8b91-18300e8a493f/2 IP52.57.25.237:0
File typeHTML document text\012- HTML document, ASCII text, with very long lines (664), with no line terminators Hash46e2fb7127231d672ab98d89c110447e cc760ee431ab49a32928ca0a120694214c5aeaf8 79bbceb6c525db63da349cb85a519cce5beb1b4d9b0b895019feffc9c773720f
GET /2abe61a2-512d-4111-8b91-18300e8a493f/2 HTTP/1.1
Host: deebcards-themier.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Server: nginx
Date: Sat, 04 Feb 2023 09:39:36 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 664
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Set-Cookie: 2abe61a2-512d-4111-8b91-18300e8a493f-v4=I29o5NmgUMnsZy3KS2I2rwf9pHL2X4zH4oeWdeyOldE; Max-Age=86400; Expires=Sun, 05-Feb-2023 09:39:36 GMT; Domain=deebcards-themier.com; Path=/; HttpOnly
cc-v4=ohd1sQ1dYI%2BjSnumpW5%2FGVDFw9o3udNIphedJCW4OgHcqXoy9ql75MwWxjrTXJoBAxyPNEoopaWyNjxBF30wb0Wms8051xq4%2FOOEIsIislkNgjcdhGL1H5BkpR1Szrde4ZIbApET85yWpSS2z2C1LQ%3D%3D; Max-Age=31536000; Expires=Sun, 04-Feb-2024 09:39:36 GMT; Domain=deebcards-themier.com; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash81713f952b51a865ad9764cde68e3fdb 278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17109
Expires: Sat, 04 Feb 2023 14:24:45 GMT
Date: Sat, 04 Feb 2023 09:39:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashec47f9eed203ae063b9c210009de54a9 19ff156471b9cffbc2432c5b65543bdd18e36271 3974208ce1840f6c9467287b7e220379ed881d76db64939f411dbc500c103d48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17612
Expires: Sat, 04 Feb 2023 14:33:08 GMT
Date: Sat, 04 Feb 2023 09:39:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfb7b6b46e708ad73eaaa3c21e74569ae 950663c025acad81556af5aa3022ecc9d55097fe 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15980
Expires: Sat, 04 Feb 2023 14:05:56 GMT
Date: Sat, 04 Feb 2023 09:39:36 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 08:43:37 GMT
content-type: application/json
age: 3359
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GLocp92+h9L8O4SA/5AtJ9sBO/lijPBxb8GbfpyLdLN9CEBjQONyAseggRR/CmX5Ng3HRxoazaE=
x-amz-request-id: BVF664DW6R2CVJRP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 09:23:56 GMT
age: 940
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| track.bestgames2018.net/redirect?target=BASE64aHR0cHM6Ly93d3cub3N0bG9uLmNvbS82NDZCRDI3L0s1UUNSTUwvP3VpZD00NDQ0JnNvdXJjZV9pZD1jODY4MTcyNS0zYmY4LTQ4MjAtYjdhMi02YWE1ZDk1MDJiOTQmc3ViMT0yYWJlNjFhMi01MTJkLTQxMTEtOGI5MS0xODMwMGU4YTQ5M2Ymc3ViMj13cDFqYjlhb3A0NGVicGNtMjNydmxvNHMmc3ViMz05ZWYxM2U5MC1lMDg2LTQzMTUtYmFkMi1hNWY5MTBjYTVlMWE&ts=1675503576567&hash=iXrEvBwFwauRrZo7uh0APO99IX0o6M95ntyHRNP9NIQ&rm=D | 18.194.134.212 | 200 | 467 B |
URL HTTP/1.1track.bestgames2018.net/redirect?target=BASE64aHR0cHM6Ly93d3cub3N0bG9uLmNvbS82NDZCRDI3L0s1UUNSTUwvP3VpZD00NDQ0JnNvdXJjZV9pZD1jODY4MTcyNS0zYmY4LTQ4MjAtYjdhMi02YWE1ZDk1MDJiOTQmc3ViMT0yYWJlNjFhMi01MTJkLTQxMTEtOGI5MS0xODMwMGU4YTQ5M2Ymc3ViMj13cDFqYjlhb3A0NGVicGNtMjNydmxvNHMmc3ViMz05ZWYxM2U5MC1lMDg2LTQzMTUtYmFkMi1hNWY5MTBjYTVlMWE&ts=1675503576567&hash=iXrEvBwFwauRrZo7uh0APO99IX0o6M95ntyHRNP9NIQ&rm=D IP18.194.134.212:0
File typeHTML document text\012- HTML document, ASCII text, with very long lines (467), with no line terminators Hashb1b1c11e7c898e6765c3ad03725b00b7 ccb09582e3f807d7643de6a97e89119034365170 960ff23a3821d2a58932845d2c8942415253a3b1b2ed634949bcf94fa2bdcfb1
GET /redirect?target=BASE64aHR0cHM6Ly93d3cub3N0bG9uLmNvbS82NDZCRDI3L0s1UUNSTUwvP3VpZD00NDQ0JnNvdXJjZV9pZD1jODY4MTcyNS0zYmY4LTQ4MjAtYjdhMi02YWE1ZDk1MDJiOTQmc3ViMT0yYWJlNjFhMi01MTJkLTQxMTEtOGI5MS0xODMwMGU4YTQ5M2Ymc3ViMj13cDFqYjlhb3A0NGVicGNtMjNydmxvNHMmc3ViMz05ZWYxM2U5MC1lMDg2LTQzMTUtYmFkMi1hNWY5MTBjYTVlMWE&ts=1675503576567&hash=iXrEvBwFwauRrZo7uh0APO99IX0o6M95ntyHRNP9NIQ&rm=D HTTP/1.1
Host: track.bestgames2018.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Server: nginx
Date: Sat, 04 Feb 2023 09:39:36 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 09:39:36 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd570d456aec931b6ab6b990b09b37b73 e16d8252bde0bc93c0b829043a284a0c0c04688b 141405cdb80e3b9747f1b6c9c63820d0746e92cec995c7c1241c2569d7f0a1e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3969
Cache-Control: max-age=146376
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:37 GMT
Etag: "63ddb120-117"
Expires: Mon, 06 Feb 2023 02:19:13 GMT
Last-Modified: Sat, 04 Feb 2023 01:13:04 GMT
Server: ECS (amb/6B9F)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd570d456aec931b6ab6b990b09b37b73 e16d8252bde0bc93c0b829043a284a0c0c04688b 141405cdb80e3b9747f1b6c9c63820d0746e92cec995c7c1241c2569d7f0a1e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3969
Cache-Control: max-age=146376
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:37 GMT
Etag: "63ddb120-117"
Expires: Mon, 06 Feb 2023 02:19:13 GMT
Last-Modified: Sat, 04 Feb 2023 01:13:04 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
|
|
| www.ostlon.com/646BD27/K5QCRML/?uid=4444&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a | 104.21.44.167 | 302 Found | 689 B |
URL HTTP/2www.ostlon.com/646BD27/K5QCRML/?uid=4444&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a IP104.21.44.167:0
File typeHTML document, ASCII text, with very long lines (358) Hashdd2488fc9479a774d04db7c1936b7e9d c733e4945ec8f0c0673ba3f7485378a12ab7b0a0 647a7db016b1480ea91320b72702d17782aadb1b351587787fad4c17a5d2c78f
GET /646BD27/K5QCRML/?uid=4444&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a HTTP/1.1
Host: www.ostlon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 04 Feb 2023 09:39:37 GMT
content-type: text/html; charset=utf-8
location: https://www.hiasor.com/646BD27/K4HMP8F/?__rpt=0&__po=9129&__ptid=4df6a6501c8547f3bd42666207ea8aba&__rpa=0&__rc=1&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a&sub4=&sub5=&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&__pcd=9
x-eflow-request-id: 13cad0fb-50ef-4c4c-a36c-cb379dfa1fce
via: 1.1 google, 1.1 varnish
accept-ranges: bytes
x-served-by: cache-bma1631-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675503577.160170,VS0,VE121
vary: Origin
set-cookie: uniqueClick_K5QCRML=62756d13-5280-4dc6-aed8-c024c39c1b09:1675503577; Path=/; Expires=Sun, 05 Feb 2023 09:39:37 GMT; SameSite=None; Secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9HLPfZnjX8FdEA8bEwiS48gQ1NXufMRsr9aPuht3%2FUGYWABa1HnjNytKFsdpbf5ApeU98JSIauHBYalwlKZUHKvHrfru%2BWtlbCPV5TQyhovkOIR5rOamsUE7fG1iGvFSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794270ad2bc5b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash27a6acbb6ffc8dfdcb4cb6c040152e77 d016fc381d37e64984e03930f1422e7a35158bfd 23908c8fdbf3feaa368154792a786a10c5a8947b676726135897bef2186286f0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=167602
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:37 GMT
Etag: "63de138b-118"
Expires: Mon, 06 Feb 2023 08:12:59 GMT
Last-Modified: Sat, 04 Feb 2023 08:12:59 GMT
Server: nginx
Content-Length: 280
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdedf9c519ac38c4bece9c5bc895787d7 4911175c3f8a435978c5301c33c7a99a5e00a1d5 bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5789
Expires: Sat, 04 Feb 2023 11:16:06 GMT
Date: Sat, 04 Feb 2023 09:39:37 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash27a6acbb6ffc8dfdcb4cb6c040152e77 d016fc381d37e64984e03930f1422e7a35158bfd 23908c8fdbf3feaa368154792a786a10c5a8947b676726135897bef2186286f0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=167602
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:37 GMT
Etag: "63de138b-118"
Expires: Mon, 06 Feb 2023 08:12:59 GMT
Last-Modified: Sat, 04 Feb 2023 08:12:59 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
|
|
| push.services.mozilla.com/ | 35.164.121.101 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.164.121.101:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dhAIZPMtXOhIrG+KtSBFqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Tb5PsLP61eCXUmiXayZqYxAhULw=
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash92619f3c1259f44d0226dcda27d62abb 73f978cebd1d6b4ebca95828d0dc70f3162cdf1b 881be13f71c095f59608de1b1a1b4fceb4aadfff90eb14442b171087ea054d0e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115365
Date: Sat, 04 Feb 2023 09:39:38 GMT
Etag: "63dd3547-1d7"
Expires: Sun, 05 Feb 2023 17:42:23 GMT
Last-Modified: Fri, 03 Feb 2023 16:24:39 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zBy99AmkXFMPjUUZv4KYUv0hcONZwQErFZ-h_Ho-AJg_gLfxNOZ2VA==
Age: 4664
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 472 B |
IP142.250.74.163:0
Hash7d482750bf7fdfcaa38c0efd583ef4dc a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d 5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TRZ44R9 | 142.250.74.168 | 200 OK | 40 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TRZ44R9 IP142.250.74.168:0
File typeASCII text, with very long lines (3372) Hashb56f278b0a8085341768bac675b128fc 6628548fa65eea8e271af11ed8ecffb4367d23e1 471276b902140d42164ef53e5eda22015f872b7107f058b498e08b7f88795902
GET /gtm.js?id=GTM-TRZ44R9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 Feb 2023 09:39:38 GMT
expires: Sat, 04 Feb 2023 09:39:38 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40033
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4/Dx-o71jYoy0 | 142.250.74.163 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/Dx-o71jYoy0 IP142.250.74.163:0
Hashe19f4f49fb6c8ec4bb574a12ce6658ce 2e2c029cc0c79270694d00c5a5790fb55bd54a45 376a10f284cbd2311e486d14abd4d64d9b5e7d8b8ffb1783f92f39692f12612d
POST /s/gts1d4/Dx-o71jYoy0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:38 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 472 B |
IP142.250.74.163:0
Hash7d482750bf7fdfcaa38c0efd583ef4dc a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d 5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| koa-pc.kingsgroupgames.com/static/img/copy.png | 44.231.10.140 | 200 OK | 1.9 kB |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/copy.png IP44.231.10.140:0
Hasha5a28bebd1fea757f4145aa4d9180373 3855c8fab14886474aa9d4a2255acfd91caddb69 cde75bc92f929fe42e431abba1003c9da9c97027ad1af4e3200282c0fe9c58d1
GET /static/img/copy.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-59f"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2694
Expires: Sat, 04 Feb 2023 10:24:33 GMT
Date: Sat, 04 Feb 2023 09:39:39 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2694
Expires: Sat, 04 Feb 2023 10:24:33 GMT
Date: Sat, 04 Feb 2023 09:39:39 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2694
Expires: Sat, 04 Feb 2023 10:24:33 GMT
Date: Sat, 04 Feb 2023 09:39:39 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2694
Expires: Sat, 04 Feb 2023 10:24:33 GMT
Date: Sat, 04 Feb 2023 09:39:39 GMT
Connection: keep-alive
|
|
| www.hiasor.com/646BD27/K4HMP8F/?__rpt=0&__po=9129&__ptid=4df6a6501c8547f3bd42666207ea8aba&__rpa=0&__rc=1&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a&sub4=&sub5=&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&__pcd=9 | 104.21.13.117 | 302 Found | 8.6 kB |
URL HTTP/2www.hiasor.com/646BD27/K4HMP8F/?__rpt=0&__po=9129&__ptid=4df6a6501c8547f3bd42666207ea8aba&__rpa=0&__rc=1&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a&sub4=&sub5=&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&__pcd=9 IP104.21.13.117:0
Hash8c64c20557dfb78b5fba74fe9f140c6a c82a5695997074ae93bbed05b130f5334032e416 f3d83e08b32220c590335895751cc92b1c0cde47a04560c1b2c0d18497fc76fc
GET /646BD27/K4HMP8F/?__rpt=0&__po=9129&__ptid=4df6a6501c8547f3bd42666207ea8aba&__rpa=0&__rc=1&sub1=2abe61a2-512d-4111-8b91-18300e8a493f&sub2=wp1jb9aop44ebpcm23rvlo4s&sub3=9ef13e90-e086-4315-bad2-a5f910ca5e1a&sub4=&sub5=&source_id=c8681725-3bf8-4820-b7a2-6aa5d9502b94&__pcd=9 HTTP/1.1
Host: www.hiasor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 04 Feb 2023 09:39:37 GMT
content-type: text/html; charset=utf-8
location: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
x-eflow-request-id: 3219e267-32ca-4f2b-98b1-e7818b47c554
via: 1.1 google, 1.1 varnish
accept-ranges: bytes
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675503578.557382,VS0,VE125
vary: Origin
set-cookie: uniqueClick_K4HMP8F=0d2fcc6d-7dfa-4604-b6d2-b5c11fdbb5ac:1675503577; Path=/; Expires=Sun, 05 Feb 2023 09:39:37 GMT; SameSite=None; Secure
transaction_id=123fa2cd93924521949c8be647629b60; Path=/; Expires=Fri, 05 May 2023 09:39:37 GMT; SameSite=None; Secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9oOzjoXpA2n5gqe2C%2Fam2jeUfKEgQUwrfPZdZeMc0oWPUHYGWsuvUPc3g32AfBxwgGGv%2Baa6kA7Xt6t20GbTukDZLV8mnKJMdzrIOrLbPHwg8NEc9D6ZHC3Gfw4n9KefhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794270af8e33b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf926cd4f39b1a10b152e5959b28ae29e 2b1982d21321071394e363888e007598e968fb35 a51b246a9aa5a2583cae7fd4f0a3bdf73f0b318b7838828d36ea5674a5f26753
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13309
x-amzn-requestid: f6a3f0f3-d91b-4f4d-8265-0f87742ba5d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyFeBFX4oAMFfpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd82bf-5808ceec265756c702d212dc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:55:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WWjzs8W8GmSAM0-Uc8XBTxz67RJJCIzp3fBYhkoIWZ26UrobmZV8mw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:14:12 GMT
etag: "2b1982d21321071394e363888e007598e968fb35"
content-type: image/jpeg
age: 41127
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd7afd5ce8fb9ec7b62e528bf97705e49 afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3 b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 41358
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe366b32074025aaf60bbae8bdb08d330 a52c2883bad98fa20333aa639a5dd3a5bf544c8e 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 06:20:04 GMT
age: 11975
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash392b61306c346508d3ac4a2f28218f9c d2de32b52e0d3f4fc6acaf687b3521294b01dc03 018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:21 GMT
age: 41658
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash45c6a062f8637e689819f505b019dc0e 61665688f1039c4fad848853a68e28d057718ad1 c9b14113eba535a2e1a6cbbf121a818ad0204fc6dd7b2ea9b592830ab927d6d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6718
x-amzn-requestid: 662f889b-4c25-4dec-85d4-ea9dfa8b8974
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7DE5boAMF_cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-33ca99fc7b6eac8d5486d6c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WvNs1hPPXHBJs5rTIBqH3DbqLLX6si9jHF46KrsuT9BFB2N2V3zeUA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:06:20 GMT
age: 41599
etag: "61665688f1039c4fad848853a68e28d057718ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hashd4c0916b5a257fbde4cbfa8ce8b04aaa 4e2974ca08419105e6498d0d03ddd356bd100d81 814170c544e5b546e23af0919e68f9f8294f3fbdb2e04b105fc3f998d3121ad5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120644
Date: Sat, 04 Feb 2023 09:39:39 GMT
Etag: "63dd5b68-1d7"
Expires: Sun, 05 Feb 2023 19:10:23 GMT
Last-Modified: Fri, 03 Feb 2023 19:07:20 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: E7eBdiLj2XCfbkMzOAcISQuLa21rur-vQ8BGdCwgEtyoSYYGggeCuA==
Age: 183
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hashd4c0916b5a257fbde4cbfa8ce8b04aaa 4e2974ca08419105e6498d0d03ddd356bd100d81 814170c544e5b546e23af0919e68f9f8294f3fbdb2e04b105fc3f998d3121ad5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 09:39:39 GMT
Etag: "63dd5b68-1d7"
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UQoI7plpDEb2FdglXqM7K2FDVFIJ6kQdRgDFnUTGLe-j8jql2YltNg==
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha3a67dba1b1b1f3ae766058d9cd538d7 9dc833327c3755593c077f703117f6187f4d3e97 b8990e3b7ba47804077dd1d5c3b3e05c8beec9a3288e3fa9e41680dc15045f0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2354
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 09:39:39 GMT
Last-Modified: Sat, 04 Feb 2023 09:00:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/fbevents.js | 157.240.205.11 | 200 OK | 28 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.205.11:0
File typeASCII text, with very long lines (64348) Hashdd1f85cc598419df61e254e53f9ec1ef f86c0ee563f5b7a01e1d40b566f2bc184a32380f c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Kd7R26geq4ts+fVpMFlBeqIyuG/LOlBip8yK70fYsqLdiRWTc8sAxoJXsFtdvPydSE5E4oNRe+z2mLwAT8CuuQ==
content-length: 27843
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 09:39:39 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/btn-1-en.png | 44.231.10.140 | 200 OK | 35 kB |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/btn-1-en.png IP44.231.10.140:0
Hash9a6f07a88ef26c89aa562595f866567d 6c31cd9877d40275407f94740b650f6ee2a29711 57f09f75430cbd30c5ca321a1d4086763b73074c1d6121132510f211418248fc
GET /static/img/btn-1-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-8834"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/pc-notice-en.png | 44.231.10.140 | 200 OK | 5.0 kB |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/pc-notice-en.png IP44.231.10.140:0
Hashe1b2aae1804bc176095f9a859782aa92 beb3b9a34abd93d73822cbce6be3ee39c751faf1 a6ec38edcb3ecee795158980b758d3bb5ca54324b6cbbc61525fe8c2f30aac70
GET /static/img/pc-notice-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-11b2"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/favicon.ico | 44.231.10.140 | 200 OK | 4.3 kB |
URL HTTP/2koa-pc.kingsgroupgames.com/favicon.ico IP44.231.10.140:0
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data Hash606996f06dddd6ca3c4d4db8272187c2 dfba199bc284c01acf42a1396b8fa167fc596da6 14053bfccdb441e56d62475ff519972a9b285ba1dc2c5e1be843d97d3f3fb2f8
GET /favicon.ico HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:39 GMT
content-type: image/x-icon
content-length: 4286
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
etag: "63c9dd39-10be"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash3b10c25e008fedaa0f80722c4f1f6d2b d9569a35a6f66d337e072b32aa6e073eb2b645d5 f47e99eb56aeeccd422cd2c9f0c285ad6942f9fa3d1461f9f044fadee7cd259a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86119
Date: Sat, 04 Feb 2023 09:39:39 GMT
Etag: "63dcd447-1d7"
Expires: Sun, 05 Feb 2023 09:34:58 GMT
Last-Modified: Fri, 03 Feb 2023 09:30:47 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QQ6a7HazoWm5lJlpx74PMUMFAgJtQYiYYW5d2CfN77DG6mLUaZXpNg==
Age: 251
|
|
| koa-logagent-cdn.kingsgroupgames.com/log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 | 54.230.111.31 | 204 No Content | 0 B |
URL HTTP/2koa-logagent-cdn.kingsgroupgames.com/log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 IP54.230.111.31:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 HTTP/1.1
Host: koa-logagent-cdn.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://koa-pc.kingsgroupgames.com/
Origin: https://koa-pc.kingsgroupgames.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: POST, OPTIONS, GET
access-control-allow-origin: *
date: Sat, 04 Feb 2023 09:39:39 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MSDd3NEO-8M5phr5gQE_9GZWE4l_g5jGQYVascgXAe-gNbRSnNlzaw==
X-Firefox-Spdy: h2
|
|
| upload-s3.funplus.com/api/upload_s3/event | 54.68.76.64 | 204 No Content | 0 B |
URL HTTP/2upload-s3.funplus.com/api/upload_s3/event IP54.68.76.64:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/upload_s3/event HTTP/1.1
Host: upload-s3.funplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: appid,appversion,content,content-type,deviceid,env,event,osversion,platform,x-content-secret
Referer: https://koa-pc.kingsgroupgames.com/
Origin: https://koa-pc.kingsgroupgames.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 04 Feb 2023 09:39:40 GMT
server: nginx/1.15.11
access-control-allow-credentials: true
access-control-allow-origin: https://koa-pc.kingsgroupgames.com
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,User-Agent,X-AppId,X-AppVersion,X-Content-Security,X-Timezone,X-Device-Id,X-AppChannel,Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type,appId,env,platform,event,appVersion,deviceId,country,content,X-Content-Secret,osVersion,clickcode
access-control-max-age: 1728000
access-control-expose-headers: x-logid
X-Firefox-Spdy: h2
|
|
| koa-logagent-cdn.kingsgroupgames.com/log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 | 54.230.111.31 | 200 OK | 2 B |
URL HTTP/2koa-logagent-cdn.kingsgroupgames.com/log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 IP54.230.111.31:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /log?tag=funplus.global.prod.pc_core×tamp=1675503614309&signature=bf5818ffd2539a82db5023edb511d89f&num=1 HTTP/1.1
Host: koa-logagent-cdn.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 375
Origin: https://koa-pc.kingsgroupgames.com
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 2
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: POST, OPTIONS, GET
access-control-allow-origin: *
date: Sat, 04 Feb 2023 09:39:40 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YJfWRydJlmFTln6_13T4rT7Faglg5YB1M0fwH1e-RENkhu1Jzm6NsQ==
X-Firefox-Spdy: h2
|
|
| upload-s3.funplus.com/api/upload_s3/event | 54.68.76.64 | 200 OK | 47 B |
URL HTTP/2upload-s3.funplus.com/api/upload_s3/event IP54.68.76.64:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7a2bb6edbb60f76c4e515b2580bea1c0 7f3e9bb56c07252a0565bbf601fd5aa3b6fb30cc d593be66c3f5fee0c1fe72a7f319e9c68a54d1e3dd5f036ae31ec87abf43b2af
POST /api/upload_s3/event HTTP/1.1
Host: upload-s3.funplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://koa-pc.kingsgroupgames.com/
appid: 62fef5d838fd9e09520e7c34
appversion: null
content:
content-type: application/json
deviceid: null
env: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
event: pc_page_view
osversion: win64
platform: Windows
x-content-secret: CB5+bcZ0R2TEVJ+jn8H6ULM0PL42dsaK1Wwr+DEyx4g=
Origin: https://koa-pc.kingsgroupgames.com
Content-Length: 0
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 47
server: nginx/1.15.11
x-trace-id: Root=1-63de27dc-6d716b2d46ea39b442b1b7b3
x-cost: 0.001
x-logid: Root=1-63de27dc-6d716b2d46ea39b442b1b7b3
access-control-allow-origin: https://koa-pc.kingsgroupgames.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Origin,User-Agent,X-AppId,X-AppVersion,X-Content-Security,X-Timezone,X-Device-Id,X-AppChannel,Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type,appId,env,platform,event,appVersion,deviceId,country,content,X-Content-Secret,osVersion,clickcode
access-control-expose-headers: x-logid
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=401322868819033&ev=PageView&dl=https%3A%2F%2Fkoa-pc.kingsgroupgames.com%2F%3Fcampaign%3Dpwngames%26source%3DOOM&rl=&if=false&ts=1675503615230&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675503615229.460899863&it=1675503614797&coo=false&rqm=GET | 157.240.205.35 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=401322868819033&ev=PageView&dl=https%3A%2F%2Fkoa-pc.kingsgroupgames.com%2F%3Fcampaign%3Dpwngames%26source%3DOOM&rl=&if=false&ts=1675503615230&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675503615229.460899863&it=1675503614797&coo=false&rqm=GET IP157.240.205.35:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=401322868819033&ev=PageView&dl=https%3A%2F%2Fkoa-pc.kingsgroupgames.com%2F%3Fcampaign%3Dpwngames%26source%3DOOM&rl=&if=false&ts=1675503615230&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675503615229.460899863&it=1675503614797&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 04 Feb 2023 09:39:40 GMT
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/arrow-other-en.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/arrow-other-en.png IP44.231.10.140:0
GET /static/img/arrow-other-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:39 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-6332"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM IP44.231.10.140:0
GET /?campaign=pwngames&source=OOM HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: text/html; charset=utf-8
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-93c"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/rewards-1.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/rewards-1.png IP44.231.10.140:0
GET /static/img/rewards-1.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-11fe5"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| kg-web-cdn.kingsgroupgames.com/official-website/pc-landing/koa/static/video_1.mp4 | 34.107.220.206 | 206 Partial Content | 0 B |
URL HTTP/2kg-web-cdn.kingsgroupgames.com/official-website/pc-landing/koa/static/video_1.mp4 IP34.107.220.206:0
GET /official-website/pc-landing/koa/static/video_1.mp4 HTTP/1.1
Host: kg-web-cdn.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 206 Partial Content
content-type: video/mp4
content-length: 9465731
date: Fri, 03 Feb 2023 12:06:03 GMT
last-modified: Mon, 19 Sep 2022 11:25:24 GMT
etag: "00740e9ce8061f616a4e9e9e19a9e665-2"
accept-ranges: bytes
server: AmazonS3
content-range: bytes 0-9465730/9465731
x-cache: Hit from cloudfront
x-amz-cf-pop: HEL50-C1
x-amz-cf-id: GsMQ1IQ5ms7YrrDffIKHY-tZg6bV2epKdsuMgNvHlt6epJUGXw4WaA==
age: 77616
via: 1.1 a529b95d300020af7b6819ecefd572f4.cloudfront.net (CloudFront), 1.1 google
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/script/md5.min.js | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/script/md5.min.js IP44.231.10.140:0
GET /static/script/md5.min.js HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:54 GMT
vary: Accept-Encoding
etag: W/"63c9dd3a-e72"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/notice-other-en.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/notice-other-en.png IP44.231.10.140:0
GET /static/img/notice-other-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:39 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-15424"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/script/clipboard.min.js | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/script/clipboard.min.js IP44.231.10.140:0
GET /static/script/clipboard.min.js HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:54 GMT
vary: Accept-Encoding
etag: W/"63c9dd3a-23c8"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/script/custom.js | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/script/custom.js IP44.231.10.140:0
GET /static/script/custom.js HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:54 GMT
vary: Accept-Encoding
etag: W/"63c9dd3a-4c88"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/style/index.css | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/style/index.css IP44.231.10.140:0
GET /static/style/index.css HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: text/css
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:54 GMT
vary: Accept-Encoding
etag: W/"63c9dd3a-3a89"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/logo.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/logo.png IP44.231.10.140:0
GET /static/img/logo.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-28d1"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/giftcode-1-en.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/giftcode-1-en.png IP44.231.10.140:0
GET /static/img/giftcode-1-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:38 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-c31c"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/arrow-en.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/arrow-en.png IP44.231.10.140:0
GET /static/img/arrow-en.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:39 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-2e85"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| koa-pc.kingsgroupgames.com/static/img/notice-other-corner.png | 44.231.10.140 | 200 OK | 0 B |
URL HTTP/2koa-pc.kingsgroupgames.com/static/img/notice-other-corner.png IP44.231.10.140:0
GET /static/img/notice-other-corner.png HTTP/1.1
Host: koa-pc.kingsgroupgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://koa-pc.kingsgroupgames.com/?campaign=pwngames&source=OOM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 09:39:39 GMT
content-type: image/png
server: nginx/1.16.1
last-modified: Fri, 20 Jan 2023 00:15:53 GMT
vary: Accept-Encoding
etag: W/"63c9dd39-12a9"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|