Report - mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-web/

Report Overview

Visited public
2023-12-05 15:58:01
Tags
URL
mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-web/
Finishing URL
mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1
IP / ASN
91.213.52.123
#49582 Upstream Telecommunications And Software Systems S.A.
Title
mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mtn-fun.cm	unknown	2018-10-12	2019-03-17 18:02:51	2023-11-09 18:06:00	10 kB	81 kB	91.213.52.123
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-12-05 06:24:59	1.4 kB	264 kB	142.250.74.168
www.google.no	25607	2001-02-26	2016-04-05 21:50:59	2023-12-05 05:55:22	587 B	578 B	142.250.74.163
region1.analytics.google.com	unknown	1997-09-15	2022-03-17 12:26:33	2023-12-05 05:10:23	1.5 kB	860 B	216.239.32.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-05 15:57:49	medium	91.213.52.123	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	75 B	2023-03-07	2025-04-26
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:42 Last Seen2025-04-26 07:19 Times Seen579 Hash 219540904c0178c788f7876c475cf695 34be8b20e8abc01ba107bb54f70c2319511043b7 328ca9901193cec5051c6c7fe1404faf85e4ce1cfed2d9bb7bc429a8573d90ca Loading...

	www.googletagmanager.com/gtag/destination?id=G-2ZBNNX5REJ&l=dataLayer&cx=c	ScriptElement	258 kB	2023-12-05	2023-12-05
Pretty URL www.googletagmanager.com/gtag/destination?id=G-2ZBNNX5REJ&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 16:58 Last Seen2023-12-05 16:58 Times Seen1 Hash d5c88d216fe935dc4e6050893f71a21a 4403f8fa00dc816e811a30d8bb4ff40a66ee215d a651d962859bfded2ca6d11d63ebf7df85e545acd59d743c4c9289ef7d0c3c8a Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	548 B	2023-05-15	2024-08-21
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-15 16:59 Last Seen2024-08-21 04:20 Times Seen9 Hash 370c94094c5d35be85d485e11078e533 de81e57f65f29a3607c87d7bfdd150619d99113e d65f5a4e0eadc5d231c24a1f757c13288e13ef1168212b487283fa79375425dc Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	205 B	2024-08-20	2024-08-20
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:40 Last Seen2024-08-20 16:40 Times Seen1 Hash f926a7ad0c82c56813ae44bcdb723afb 1c49d2bfa746c8d31977184a493bfe5a3fb39061 1ae5e9872e73f766c9ae5990b21ece5878522be4f9b3a4b14c1883f2c6aa0110 Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	337 B	2023-03-09	2025-04-18
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-09 00:01 Last Seen2025-04-18 09:52 Times Seen11 Hash 758a5fa96b8928e5475df873bdcab39a ed115357b2ea302f560c8395f91a1c8812e2fa3a f6f0cad06659dd8270c1e2da479262c03dd4578020be20415b9f264a94b5ded3 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-KS9CJWV	ScriptElement	239 kB	2023-12-05	2023-12-05
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-KS9CJWV IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 16:58 Last Seen2023-12-05 16:58 Times Seen1 Hash d2eeeba1e88f258fb9aad09e685e7490 1b7759476f6322a764054167b722c0d47b6036f4 32e2c79e5d442330e8e924c3077de8f27081f55ee790c27af19aabc3beea38f8 Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/sandbox%20eval%20code		147 B	2023-04-11	2025-05-10
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-05-10 11:47 Times Seen341645 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-05-10
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-05-10 11:47 Times Seen340844 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	www.googletagmanager.com/gtag/js?id=G-2ZBNNX5REJ&l=dataLayer&cx=c	ScriptElement	258 kB	2023-12-05	2023-12-05
Pretty URL www.googletagmanager.com/gtag/js?id=G-2ZBNNX5REJ&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 16:58 Last Seen2023-12-05 16:58 Times Seen1 Hash 6a76fabcf15448b8788e729b90ac1c07 56995f266d6c71fb258b087562b963444adb9f3f 169d8b8d2187860dde6e18a99b1f8f798526a0a72bb29074087c03ccca19ce49 Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	56 B	2023-03-07	2025-04-26
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:42 Last Seen2025-04-26 07:19 Times Seen256 Hash e633aa08ae12366911d8e26c62df0ac7 a16f61cc6d9dbd371d1111eaff9b8e9ab3532ad7 4d9920d1b0a027e9d1e7994912dede5626a56cef010170b15fb45edc85f882ed Loading...

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	ScriptElement	2.6 kB	2023-11-09	2024-08-20
Pretty URL mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123 ASN #49582 Upstream Telecommunications And Software Systems S.A. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-09 21:12 Last Seen2024-08-20 20:13 Times Seen7 Hash b862a7c2858d32c0ad1fbb5fcbd49230 98c2efb5fdf1c496f20f70e8f872ad4b26d46ea7 2888ac135cb5ac1496be473adfe338a0a406033cddab7db9781e9ca01ca8e5f6 Loading...

HTTP Transactions (12)

	URL	IP	Response	Size
	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-web/	91.213.52.123		490 B
URL User Request GET mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-web/ IP 91.213.52.123:0 ASN #49582 Upstream Telecommunications And Software Systems S.A. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 490 B (490 bytes) Hash b4b50da74d75ffa4e4c4b6e541475711 413a358d8ef0c2b76adcaf07df49cfc9ac465f8c f8ee2f5a7084918e434222eab001b297a421e9c1a07cc4bac1231ea94cef7da0 HTTP Headers `GET /CMP-CMMTN-UPSTR/prize3-fr-soi-web/ HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Tue, 05 Dec 2023 15:57:43 GMT Cache-Control: no-cache, private Location: http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Content-Type: text/html; charset=UTF-8 X-Varnish: 65586280 Age: 0 Via: 1.1 varnish (Varnish/6.0) X-Cache: MISS Access-Control-Allow-Origin: * Set-Cookie: ng_session=eyJpdiI6IlNTREZtRnlXdmF4T3o1WGNMNFluZXc9PSIsInZhbHVlIjoidHdxTHVyNXIyb0dab2I4QnY1ZGhCRVNiRHZGcUU3Z1VzOERzdUFWZVQwRkNvMTZnVmFrYTZZdWRjYnNWdENDRWZ4QVprVnYzYW1vTVVLL3NSMktSV2c5bkNtUDd6OHRaaGhpTVlBVFZodSt4cDZzRC83OWhaTTgwMkJGdnY1Y1YiLCJtYWMiOiJlMmRkOTZhOTQyMjAzYmNlY2VhNDA5NTIyZWVkNGFkMjRjZGRjNzFkYzhiYzNjNDBhMDg1NTU0Y2Q4MDM0MTZkIiwidGFnIjoiIn0%3D; expires=Tue, 05 Dec 2023 21:57:43 GMT; Max-Age=21600; path=/; httponly; samesite=lax ctxid=eyJpdiI6InZURjZDT1JJMzRiWjd2ZG5LcFFWcnc9PSIsInZhbHVlIjoiS2xXN3RoTDMvV2ozeXE2cXpoMTZBMFRxUHpyeXYzeDNJMWhIODFkaDN3akVKZy9Nam5lSkpWaU81UlJqNnFyRCttVkFKK01SbU16amtnNEdoTWtBMnI0c1RzTjkwSmc0MThGaHdQelV4bk09IiwibWFjIjoiYWFjMjQ4NTMzMTMxZjRkOTYzNjEwNjYxY2IxYTJhYTQxNWE3MmM0NDA2YjQ0MDlmOTI0NjA4NTY5ZDljNzQwNyIsInRhZyI6IiJ9; expires=Fri, 02 Dec 2033 15:57:43 GMT; Max-Age=315360000; path=/; httponly; samesite=lax rd=deleted; expires=Mon, 05 Dec 2022 15:57:42 GMT; Max-Age=0; path=/; httponly; samesite=lax userSessionID=eyJpdiI6IkdvU1BZSkRxWkR3ZnhKRXd4T0VobUE9PSIsInZhbHVlIjoidEJBUVhOQUQvQVhlQ2Z5TzRMOVd4UGFzR28yUDVKZXlOVS9Pc3pLYU1MU1E2NzZKaU1oV1lOT3ZoQ3hOYWp5cUZKenVHOVZSSzU4QVczRHpqRW9LcXZpTXBRYVhiTFRCVS9ObStFWGtiMlU9IiwibWFjIjoiZTJkMTc0NjBmZGRjYzBhM2M1Y2NjNDE1ZjBmNTMwYzFjZGUwMzhmMDhkY2JmZjRhZTFlMTg1OTA1NzAzYjQ0MyIsInRhZyI6IiJ9; expires=Tue, 05 Dec 2023 16:27:43 GMT; Max-Age=1800; path=/; httponly; samesite=lax userPermID=eyJpdiI6Iit6Zy93clRnaUtRMjdqYmRkeFpSbWc9PSIsInZhbHVlIjoibUt3QVBNSjFWQnlGZ1RrdjQrMmNMOGJsRytqS28xV0ZNQ2pvTVR1ZW52Nm82U2MvQytuVnNYeWF2YjE1RHdvV3ZUaEdnYVdTclNOZHl5THBsa0FZZ3pTNkZ4Q0hBbnByRTZ0TTdqakx6M1U9IiwibWFjIjoiYzFiNDE1NDk4MzAxYTg2MWZmMzE4OTAzNGUxN2QyMjBkYWIyMjlmNmEzMTA3MjI2Mzc2ODFlZWM3OTk2N2IzMyIsInRhZyI6IiJ9; expires=Fri, 02 Dec 2033 15:57:43 GMT; Max-Age=315360000; path=/; httponly; samesite=lax TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699; Path=/ Keep-Alive: timeout=2, max=1000 Connection: Keep-Alive Transfer-Encoding: chunked

	mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1	91.213.52.123		5.6 kB
URL User Request GET mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 IP 91.213.52.123:0 ASN #49582 Upstream Telecommunications And Software Systems S.A. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (3785) Size 5.6 kB (5641 bytes) Hash 6b94b55647270ec3ae6be8142cefd7ea 85435c3699e44093cd6664eb528d56e0e18d7182 140444c8040935d898530ecc1ea87a18e51ec2b88a34656367d78c383f9f11cc HTTP Headers GET /CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: ng_session=eyJpdiI6IlNTREZtRnlXdmF4T3o1WGNMNFluZXc9PSIsInZhbHVlIjoidHdxTHVyNXIyb0dab2I4QnY1ZGhCRVNiRHZGcUU3Z1VzOERzdUFWZVQwRkNvMTZnVmFrYTZZdWRjYnNWdENDRWZ4QVprVnYzYW1vTVVLL3NSMktSV2c5bkNtUDd6OHRaaGhpTVlBVFZodSt4cDZzRC83OWhaTTgwMkJGdnY1Y1YiLCJtYWMiOiJlMmRkOTZhOTQyMjAzYmNlY2VhNDA5NTIyZWVkNGFkMjRjZGRjNzFkYzhiYzNjNDBhMDg1NTU0Y2Q4MDM0MTZkIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6InZURjZDT1JJMzRiWjd2ZG5LcFFWcnc9PSIsInZhbHVlIjoiS2xXN3RoTDMvV2ozeXE2cXpoMTZBMFRxUHpyeXYzeDNJMWhIODFkaDN3akVKZy9Nam5lSkpWaU81UlJqNnFyRCttVkFKK01SbU16amtnNEdoTWtBMnI0c1RzTjkwSmc0MThGaHdQelV4bk09IiwibWFjIjoiYWFjMjQ4NTMzMTMxZjRkOTYzNjEwNjYxY2IxYTJhYTQxNWE3MmM0NDA2YjQ0MDlmOTI0NjA4NTY5ZDljNzQwNyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkdvU1BZSkRxWkR3ZnhKRXd4T0VobUE9PSIsInZhbHVlIjoidEJBUVhOQUQvQVhlQ2Z5TzRMOVd4UGFzR28yUDVKZXlOVS9Pc3pLYU1MU1E2NzZKaU1oV1lOT3ZoQ3hOYWp5cUZKenVHOVZSSzU4QVczRHpqRW9LcXZpTXBRYVhiTFRCVS9ObStFWGtiMlU9IiwibWFjIjoiZTJkMTc0NjBmZGRjYzBhM2M1Y2NjNDE1ZjBmNTMwYzFjZGUwMzhmMDhkY2JmZjRhZTFlMTg1OTA1NzAzYjQ0MyIsInRhZyI6IiJ9; userPermID=eyJpdiI6Iit6Zy93clRnaUtRMjdqYmRkeFpSbWc9PSIsInZhbHVlIjoibUt3QVBNSjFWQnlGZ1RrdjQrMmNMOGJsRytqS28xV0ZNQ2pvTVR1ZW52Nm82U2MvQytuVnNYeWF2YjE1RHdvV3ZUaEdnYVdTclNOZHl5THBsa0FZZ3pTNkZ4Q0hBbnByRTZ0TTdqakx6M1U9IiwibWFjIjoiYzFiNDE1NDk4MzAxYTg2MWZmMzE4OTAzNGUxN2QyMjBkYWIyMjlmNmEzMTA3MjI2Mzc2ODFlZWM3OTk2N2IzMyIsInRhZyI6IiJ9; TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699 Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Tue, 05 Dec 2023 15:57:43 GMT Cache-Control: no-cache, private X-Frame-Options: DENY Strict-Transport-Security: max-age=0; includeSubDomains Vary: Accept-Encoding Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 X-Varnish: 65586282 Age: 0 Via: 1.1 varnish (Varnish/6.0) X-Cache: MISS Access-Control-Allow-Origin: * Accept-Ranges: bytes Set-Cookie: ng_session=eyJpdiI6IjF6U2cvTm1ueW5Dd05MVExXd1lKWWc9PSIsInZhbHVlIjoiTlI2bzRMY1JRNTFkSFVPRFc1bUdJY2k3bE01YUViNFdXWXBGL3ZoNlBMMEp6VkRscTVlTnVkRThtQlFyTmpiQlcyVU9JWjNKMCtyQUFtMHBsMHM3dHE2YTlRem1NUHlOMlVNZmRmR3hVZDF6M2c2cjlZZVJDYTlXZ0dha29NMTEiLCJtYWMiOiJkODQwNjUxNzIyMTZjMzMzYzY2NmMxMDZmM2JlNjQyMzNhMjQxMzZhOTJmMDE4NzMzNDRiZTkyOGIzZGQzZDhmIiwidGFnIjoiIn0%3D; expires=Tue, 05 Dec 2023 21:57:44 GMT; Max-Age=21600; path=/; httponly; samesite=lax userPermID=eyJpdiI6ImdCQ1kxSlpRMlpicTkwY1JPbXhRWEE9PSIsInZhbHVlIjoiUG9OQlZOL2Jjb04xN3ZUVnFKRnZ6amYwU1kxNHM1N1N1aDNrVVFsSS95N1cwbzE2Tlh5RndPQnRpdCtTZFNueEF4bDVPd1dIZjZkWU11VVJMVEV4V0UraTdGL1FJb1ZNbFdUUFVWYWp0cjg9IiwibWFjIjoiM2E4MzljYjU1ZDViZTRjNjU3ZjI2NzY0NTVkMGMyNDkyYzE5NmU4MTY2NTIzYjE2M2Q1NmE0OWM0MjgxNDVhNyIsInRhZyI6IiJ9; expires=Fri, 02 Dec 2033 15:57:44 GMT; Max-Age=315360000; path=/; httponly; samesite=lax userSessionID=eyJpdiI6IkdhMGdoQWkyZ0RieTV6ajNBWGdTN2c9PSIsInZhbHVlIjoiL0QyUDh4NzVLWkRmV3N0Ky8rNmUrVkFwYklSdGZtd0xhaXBvRWlJbXRnaHN4ZEUwbTNXVlpNUWw3ZWZOWGJ3L0xXYkhMWXI3blZwK2xSNU9DcVVuYkhrSnNXdTNJOWI3c2I3NC9KZHN1MzA9IiwibWFjIjoiZTJmMWRkNTE0ZGFkOGRiZjkwYzMzNDQwNWQxOWIwY2I4OTQ3ZDcwYjQ4OTRkNjVmOGQ2OGE0ODBmMDI4ODAyZSIsInRhZyI6IiJ9; expires=Tue, 05 Dec 2023 16:27:44 GMT; Max-Age=1800; path=/; httponly; samesite=lax ctxid=eyJpdiI6IlJzcWY5ZWtMME9pYXpaUnhneFcrU0E9PSIsInZhbHVlIjoiWENyZFNHMjZ1YTh6dUY4SW9pU1lYK2RlM3g0V3dPSWswQlIyQlRjbGRIZ3dsdDltTW92aU9XZVZzZVdaejNZTHkvWlorRDBRMzhBcFdnbC9lN3Zhc0dQdC9SaHNRMVlQbExEVGV0MlVtUE09IiwibWFjIjoiOWM5NjhhMWY2ZWJmNDUyYWNmNjgzMTgxYWYxNzJmM2Y1ZmFiNWY0MjJlZjMwZjNiODdmZTQ0NTQxM2NjMzIzMyIsInRhZyI6IiJ9; expires=Fri, 02 Dec 2033 15:57:44 GMT; Max-Age=315360000; path=/; httponly; samesite=lax rd=deleted; expires=Mon, 05 Dec 2022 15:57:43 GMT; Max-Age=0; path=/; httponly; samesite=lax TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699; Path=/ Keep-Alive: timeout=2, max=999 Connection: Keep-Alive Transfer-Encoding: chunked

	mtn-fun.cm/CMP-CMMTN-UPSTR/assets/CMP-CMMTN-UPSTR-prize3-fr-soi-wifi.css?ver=41	91.213.52.123	200 OK	3.0 kB
URL GET HTTP/1.1 mtn-fun.cm/CMP-CMMTN-UPSTR/assets/CMP-CMMTN-UPSTR-prize3-fr-soi-wifi.css?ver=41 IP 91.213.52.123:80 ASN #49582 Upstream Telecommunications And Software Systems S.A. Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 File type ASCII text Size 3.0 kB (2965 bytes) Hash 93005e8662d0353a2e9f7b75a1febc78 b4521975098c98d1c4af6ad85967387003d69d95 c665ac19624ea657967be57c7ff287d04b7c878878e4d40299aa9d1d75195e1d HTTP Headers GET /CMP-CMMTN-UPSTR/assets/CMP-CMMTN-UPSTR-prize3-fr-soi-wifi.css?ver=41 HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Cookie: ng_session=eyJpdiI6IjF6U2cvTm1ueW5Dd05MVExXd1lKWWc9PSIsInZhbHVlIjoiTlI2bzRMY1JRNTFkSFVPRFc1bUdJY2k3bE01YUViNFdXWXBGL3ZoNlBMMEp6VkRscTVlTnVkRThtQlFyTmpiQlcyVU9JWjNKMCtyQUFtMHBsMHM3dHE2YTlRem1NUHlOMlVNZmRmR3hVZDF6M2c2cjlZZVJDYTlXZ0dha29NMTEiLCJtYWMiOiJkODQwNjUxNzIyMTZjMzMzYzY2NmMxMDZmM2JlNjQyMzNhMjQxMzZhOTJmMDE4NzMzNDRiZTkyOGIzZGQzZDhmIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IlJzcWY5ZWtMME9pYXpaUnhneFcrU0E9PSIsInZhbHVlIjoiWENyZFNHMjZ1YTh6dUY4SW9pU1lYK2RlM3g0V3dPSWswQlIyQlRjbGRIZ3dsdDltTW92aU9XZVZzZVdaejNZTHkvWlorRDBRMzhBcFdnbC9lN3Zhc0dQdC9SaHNRMVlQbExEVGV0MlVtUE09IiwibWFjIjoiOWM5NjhhMWY2ZWJmNDUyYWNmNjgzMTgxYWYxNzJmM2Y1ZmFiNWY0MjJlZjMwZjNiODdmZTQ0NTQxM2NjMzIzMyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkdhMGdoQWkyZ0RieTV6ajNBWGdTN2c9PSIsInZhbHVlIjoiL0QyUDh4NzVLWkRmV3N0Ky8rNmUrVkFwYklSdGZtd0xhaXBvRWlJbXRnaHN4ZEUwbTNXVlpNUWw3ZWZOWGJ3L0xXYkhMWXI3blZwK2xSNU9DcVVuYkhrSnNXdTNJOWI3c2I3NC9KZHN1MzA9IiwibWFjIjoiZTJmMWRkNTE0ZGFkOGRiZjkwYzMzNDQwNWQxOWIwY2I4OTQ3ZDcwYjQ4OTRkNjVmOGQ2OGE0ODBmMDI4ODAyZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6ImdCQ1kxSlpRMlpicTkwY1JPbXhRWEE9PSIsInZhbHVlIjoiUG9OQlZOL2Jjb04xN3ZUVnFKRnZ6amYwU1kxNHM1N1N1aDNrVVFsSS95N1cwbzE2Tlh5RndPQnRpdCtTZFNueEF4bDVPd1dIZjZkWU11VVJMVEV4V0UraTdGL1FJb1ZNbFdUUFVWYWp0cjg9IiwibWFjIjoiM2E4MzljYjU1ZDViZTRjNjU3ZjI2NzY0NTVkMGMyNDkyYzE5NmU4MTY2NTIzYjE2M2Q1NmE0OWM0MjgxNDVhNyIsInRhZyI6IiJ9; TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 05 Dec 2023 15:57:06 GMT Last-Modified: Tue, 05 Sep 2023 08:14:25 GMT ETag: "5486-6049837097faf-gzip" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2965 Content-Type: text/css X-Varnish: 65586284 65586260 Age: 37 Via: 1.1 varnish (Varnish/6.0) X-Cache: HIT Access-Control-Allow-Origin: * Accept-Ranges: bytes Keep-Alive: timeout=2, max=998 Connection: Keep-Alive`

	mtn-fun.cm/CMP-CMMTN-UPSTR/assets/wr-images/close-wap.png	91.213.52.123	200 OK	213 B
URL GET HTTP/1.1 mtn-fun.cm/CMP-CMMTN-UPSTR/assets/wr-images/close-wap.png IP 91.213.52.123:80 ASN #49582 Upstream Telecommunications And Software Systems S.A. Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 File type PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced\012- data Size 213 B (213 bytes) Hash d249b874e72ea9acce9f630517b48c4e 78a06a4b69bbd59d7fa9c70723640c775caf37cc 1861c75e1a0c132e357bccf763069d785f5954fe959d784abb1773f93b87bd28 HTTP Headers GET /CMP-CMMTN-UPSTR/assets/wr-images/close-wap.png HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Cookie: ng_session=eyJpdiI6IjF6U2cvTm1ueW5Dd05MVExXd1lKWWc9PSIsInZhbHVlIjoiTlI2bzRMY1JRNTFkSFVPRFc1bUdJY2k3bE01YUViNFdXWXBGL3ZoNlBMMEp6VkRscTVlTnVkRThtQlFyTmpiQlcyVU9JWjNKMCtyQUFtMHBsMHM3dHE2YTlRem1NUHlOMlVNZmRmR3hVZDF6M2c2cjlZZVJDYTlXZ0dha29NMTEiLCJtYWMiOiJkODQwNjUxNzIyMTZjMzMzYzY2NmMxMDZmM2JlNjQyMzNhMjQxMzZhOTJmMDE4NzMzNDRiZTkyOGIzZGQzZDhmIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IlJzcWY5ZWtMME9pYXpaUnhneFcrU0E9PSIsInZhbHVlIjoiWENyZFNHMjZ1YTh6dUY4SW9pU1lYK2RlM3g0V3dPSWswQlIyQlRjbGRIZ3dsdDltTW92aU9XZVZzZVdaejNZTHkvWlorRDBRMzhBcFdnbC9lN3Zhc0dQdC9SaHNRMVlQbExEVGV0MlVtUE09IiwibWFjIjoiOWM5NjhhMWY2ZWJmNDUyYWNmNjgzMTgxYWYxNzJmM2Y1ZmFiNWY0MjJlZjMwZjNiODdmZTQ0NTQxM2NjMzIzMyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkdhMGdoQWkyZ0RieTV6ajNBWGdTN2c9PSIsInZhbHVlIjoiL0QyUDh4NzVLWkRmV3N0Ky8rNmUrVkFwYklSdGZtd0xhaXBvRWlJbXRnaHN4ZEUwbTNXVlpNUWw3ZWZOWGJ3L0xXYkhMWXI3blZwK2xSNU9DcVVuYkhrSnNXdTNJOWI3c2I3NC9KZHN1MzA9IiwibWFjIjoiZTJmMWRkNTE0ZGFkOGRiZjkwYzMzNDQwNWQxOWIwY2I4OTQ3ZDcwYjQ4OTRkNjVmOGQ2OGE0ODBmMDI4ODAyZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6ImdCQ1kxSlpRMlpicTkwY1JPbXhRWEE9PSIsInZhbHVlIjoiUG9OQlZOL2Jjb04xN3ZUVnFKRnZ6amYwU1kxNHM1N1N1aDNrVVFsSS95N1cwbzE2Tlh5RndPQnRpdCtTZFNueEF4bDVPd1dIZjZkWU11VVJMVEV4V0UraTdGL1FJb1ZNbFdUUFVWYWp0cjg9IiwibWFjIjoiM2E4MzljYjU1ZDViZTRjNjU3ZjI2NzY0NTVkMGMyNDkyYzE5NmU4MTY2NTIzYjE2M2Q1NmE0OWM0MjgxNDVhNyIsInRhZyI6IiJ9; TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 08:31:28 GMT Last-Modified: Tue, 11 Jul 2023 10:00:25 GMT ETag: "d5-600332b044d56" Content-Length: 213 Cache-Control: max-age=5184000 Expires: Thu, 25 Jan 2024 08:31:28 GMT Content-Type: image/png X-Varnish: 64933644 62975220 Age: 804375 Via: 1.1 varnish (Varnish/6.0) X-Cache: HIT Access-Control-Allow-Origin: * Accept-Ranges: bytes Keep-Alive: timeout=2, max=1000 Connection: Keep-Alive`

	www.googletagmanager.com/gtm.js?id=GTM-KS9CJWV	142.250.74.168	200 OK	85 kB
URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KS9CJWV IP 142.250.74.168:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT File type ASCII text, with very long lines (3026) Size 85 kB (85242 bytes) Hash d2eeeba1e88f258fb9aad09e685e7490 1b7759476f6322a764054167b722c0d47b6036f4 32e2c79e5d442330e8e924c3077de8f27081f55ee790c27af19aabc3beea38f8 HTTP Headers `GET /gtm.js?id=GTM-KS9CJWV HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Tue, 05 Dec 2023 15:57:44 GMT expires: Tue, 05 Dec 2023 15:57:44 GMT cache-control: private, max-age=900 last-modified: Tue, 05 Dec 2023 15:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 85242 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	mtn-fun.cm/CMP-CMMTN-UPSTR/assets/assets/images/CMP-Prize3-bg.jpg	91.213.52.123	200 OK	37 kB
URL GET HTTP/1.1 mtn-fun.cm/CMP-CMMTN-UPSTR/assets/assets/images/CMP-Prize3-bg.jpg IP 91.213.52.123:80 ASN #49582 Upstream Telecommunications And Software Systems S.A. Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 320x480, components 3\012- data Size 37 kB (37187 bytes) Hash 652a5a84a86a409cb7f194f8a8d7c499 445f818ba916bfdc619490e4865356165d9a2569 bb0e2023ccb92f1fae58cbc5a9b29b74031524ef26f66464e6cfe45802e65dfd HTTP Headers GET /CMP-CMMTN-UPSTR/assets/assets/images/CMP-Prize3-bg.jpg HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/CMP-CMMTN-UPSTR/assets/CMP-CMMTN-UPSTR-prize3-fr-soi-wifi.css?ver=41 Cookie: ng_session=eyJpdiI6IjF6U2cvTm1ueW5Dd05MVExXd1lKWWc9PSIsInZhbHVlIjoiTlI2bzRMY1JRNTFkSFVPRFc1bUdJY2k3bE01YUViNFdXWXBGL3ZoNlBMMEp6VkRscTVlTnVkRThtQlFyTmpiQlcyVU9JWjNKMCtyQUFtMHBsMHM3dHE2YTlRem1NUHlOMlVNZmRmR3hVZDF6M2c2cjlZZVJDYTlXZ0dha29NMTEiLCJtYWMiOiJkODQwNjUxNzIyMTZjMzMzYzY2NmMxMDZmM2JlNjQyMzNhMjQxMzZhOTJmMDE4NzMzNDRiZTkyOGIzZGQzZDhmIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IlJzcWY5ZWtMME9pYXpaUnhneFcrU0E9PSIsInZhbHVlIjoiWENyZFNHMjZ1YTh6dUY4SW9pU1lYK2RlM3g0V3dPSWswQlIyQlRjbGRIZ3dsdDltTW92aU9XZVZzZVdaejNZTHkvWlorRDBRMzhBcFdnbC9lN3Zhc0dQdC9SaHNRMVlQbExEVGV0MlVtUE09IiwibWFjIjoiOWM5NjhhMWY2ZWJmNDUyYWNmNjgzMTgxYWYxNzJmM2Y1ZmFiNWY0MjJlZjMwZjNiODdmZTQ0NTQxM2NjMzIzMyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkdhMGdoQWkyZ0RieTV6ajNBWGdTN2c9PSIsInZhbHVlIjoiL0QyUDh4NzVLWkRmV3N0Ky8rNmUrVkFwYklSdGZtd0xhaXBvRWlJbXRnaHN4ZEUwbTNXVlpNUWw3ZWZOWGJ3L0xXYkhMWXI3blZwK2xSNU9DcVVuYkhrSnNXdTNJOWI3c2I3NC9KZHN1MzA9IiwibWFjIjoiZTJmMWRkNTE0ZGFkOGRiZjkwYzMzNDQwNWQxOWIwY2I4OTQ3ZDcwYjQ4OTRkNjVmOGQ2OGE0ODBmMDI4ODAyZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6ImdCQ1kxSlpRMlpicTkwY1JPbXhRWEE9PSIsInZhbHVlIjoiUG9OQlZOL2Jjb04xN3ZUVnFKRnZ6amYwU1kxNHM1N1N1aDNrVVFsSS95N1cwbzE2Tlh5RndPQnRpdCtTZFNueEF4bDVPd1dIZjZkWU11VVJMVEV4V0UraTdGL1FJb1ZNbFdUUFVWYWp0cjg9IiwibWFjIjoiM2E4MzljYjU1ZDViZTRjNjU3ZjI2NzY0NTVkMGMyNDkyYzE5NmU4MTY2NTIzYjE2M2Q1NmE0OWM0MjgxNDVhNyIsInRhZyI6IiJ9; TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 Nov 2023 19:06:46 GMT Last-Modified: Fri, 15 Oct 2021 08:32:01 GMT ETag: "9143-5ce60077d3a26" Content-Length: 37187 Cache-Control: max-age=5184000 Expires: Sun, 07 Jan 2024 19:06:46 GMT Content-Type: image/jpeg X-Varnish: 65586285 59744993 Age: 2321457 Via: 1.1 varnish (Varnish/6.0) X-Cache: HIT Access-Control-Allow-Origin: * Accept-Ranges: bytes Keep-Alive: timeout=2, max=997 Connection: Keep-Alive`

	mtn-fun.cm/CMP-CMMTN-UPSTR/assets/assets/fonts/mtnbrightersans-regular-webfont.ttf	91.213.52.123	200 OK	28 kB
URL GET HTTP/1.1 mtn-fun.cm/CMP-CMMTN-UPSTR/assets/assets/fonts/mtnbrightersans-regular-webfont.ttf IP 91.213.52.123:80 ASN #49582 Upstream Telecommunications And Software Systems S.A. Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 File type TrueType Font data, 19 tables, 1st "FFTM", 18 names, Microsoft, language 0x409, Copyright \251 2017 Newlyn Works Limited. All rights reserved.MTN Brighter SansRegular1.100;NEWL\012- data Size 28 kB (28400 bytes) Hash a67bc096b92acd50796fe0fe861d4d8c 3722aef8bd4afd250292b13b52718275b32b15e2 f915681f266ccd3b4e80e13d3e541b2462d2ce6be4564835f1466fad0d2884be HTTP Headers GET /CMP-CMMTN-UPSTR/assets/assets/fonts/mtnbrightersans-regular-webfont.ttf HTTP/1.1 Host: mtn-fun.cm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/CMP-CMMTN-UPSTR/assets/CMP-CMMTN-UPSTR-prize3-fr-soi-wifi.css?ver=41 Cookie: ng_session=eyJpdiI6IjF6U2cvTm1ueW5Dd05MVExXd1lKWWc9PSIsInZhbHVlIjoiTlI2bzRMY1JRNTFkSFVPRFc1bUdJY2k3bE01YUViNFdXWXBGL3ZoNlBMMEp6VkRscTVlTnVkRThtQlFyTmpiQlcyVU9JWjNKMCtyQUFtMHBsMHM3dHE2YTlRem1NUHlOMlVNZmRmR3hVZDF6M2c2cjlZZVJDYTlXZ0dha29NMTEiLCJtYWMiOiJkODQwNjUxNzIyMTZjMzMzYzY2NmMxMDZmM2JlNjQyMzNhMjQxMzZhOTJmMDE4NzMzNDRiZTkyOGIzZGQzZDhmIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IlJzcWY5ZWtMME9pYXpaUnhneFcrU0E9PSIsInZhbHVlIjoiWENyZFNHMjZ1YTh6dUY4SW9pU1lYK2RlM3g0V3dPSWswQlIyQlRjbGRIZ3dsdDltTW92aU9XZVZzZVdaejNZTHkvWlorRDBRMzhBcFdnbC9lN3Zhc0dQdC9SaHNRMVlQbExEVGV0MlVtUE09IiwibWFjIjoiOWM5NjhhMWY2ZWJmNDUyYWNmNjgzMTgxYWYxNzJmM2Y1ZmFiNWY0MjJlZjMwZjNiODdmZTQ0NTQxM2NjMzIzMyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkdhMGdoQWkyZ0RieTV6ajNBWGdTN2c9PSIsInZhbHVlIjoiL0QyUDh4NzVLWkRmV3N0Ky8rNmUrVkFwYklSdGZtd0xhaXBvRWlJbXRnaHN4ZEUwbTNXVlpNUWw3ZWZOWGJ3L0xXYkhMWXI3blZwK2xSNU9DcVVuYkhrSnNXdTNJOWI3c2I3NC9KZHN1MzA9IiwibWFjIjoiZTJmMWRkNTE0ZGFkOGRiZjkwYzMzNDQwNWQxOWIwY2I4OTQ3ZDcwYjQ4OTRkNjVmOGQ2OGE0ODBmMDI4ODAyZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6ImdCQ1kxSlpRMlpicTkwY1JPbXhRWEE9PSIsInZhbHVlIjoiUG9OQlZOL2Jjb04xN3ZUVnFKRnZ6amYwU1kxNHM1N1N1aDNrVVFsSS95N1cwbzE2Tlh5RndPQnRpdCtTZFNueEF4bDVPd1dIZjZkWU11VVJMVEV4V0UraTdGL1FJb1ZNbFdUUFVWYWp0cjg9IiwibWFjIjoiM2E4MzljYjU1ZDViZTRjNjU3ZjI2NzY0NTVkMGMyNDkyYzE5NmU4MTY2NTIzYjE2M2Q1NmE0OWM0MjgxNDVhNyIsInRhZyI6IiJ9; TS01c03e2d=0119fdce07d3e900e1245c421c2a4e74c4fd8a74110c7dc5fbdcef04e58940c1cab8a7c3157b6959cce52fb1ab6f7c5ee565c66699 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 05 Dec 2023 15:57:43 GMT Last-Modified: Tue, 11 Jul 2023 10:00:25 GMT ETag: "d0d8-600332b03ef95-gzip" Content-Type: font/ttf X-Varnish: 64933645 64933643 Age: 0 Via: 1.1 varnish (Varnish/6.0) X-Cache: HIT Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 28400 Keep-Alive: timeout=2, max=999 Connection: Keep-Alive`

	www.googletagmanager.com/gtag/destination?id=G-2ZBNNX5REJ&l=dataLayer&cx=c	142.250.74.168	200 OK	88 kB
URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=G-2ZBNNX5REJ&l=dataLayer&cx=c IP 142.250.74.168:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT File type ASCII text, with very long lines (7711) Size 88 kB (88466 bytes) Hash d5c88d216fe935dc4e6050893f71a21a 4403f8fa00dc816e811a30d8bb4ff40a66ee215d a651d962859bfded2ca6d11d63ebf7df85e545acd59d743c4c9289ef7d0c3c8a HTTP Headers `GET /gtag/destination?id=G-2ZBNNX5REJ&l=dataLayer&cx=c HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Tue, 05 Dec 2023 15:57:44 GMT expires: Tue, 05 Dec 2023 15:57:44 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 88466 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	www.googletagmanager.com/gtag/js?id=G-2ZBNNX5REJ&l=dataLayer&cx=c	142.250.74.168	200 OK	88 kB
URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-2ZBNNX5REJ&l=dataLayer&cx=c IP 142.250.74.168:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT File type ASCII text, with very long lines (7711) Size 88 kB (88548 bytes) Hash 6a76fabcf15448b8788e729b90ac1c07 56995f266d6c71fb258b087562b963444adb9f3f 169d8b8d2187860dde6e18a99b1f8f798526a0a72bb29074087c03ccca19ce49 HTTP Headers `GET /gtag/js?id=G-2ZBNNX5REJ&l=dataLayer&cx=c HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Tue, 05 Dec 2023 15:57:44 GMT expires: Tue, 05 Dec 2023 15:57:44 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 88548 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2ZBNNX5REJ&cid=1341278446.1701791871&gtm=45je3bt0v9100486290z8813450493&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2110866848	142.250.74.163	200 OK	42 B
URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2ZBNNX5REJ&cid=1341278446.1701791871&gtm=45je3bt0v9100486290z8813450493&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2110866848 IP 142.250.74.163:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google.no Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32 ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2ZBNNX5REJ&cid=1341278446.1701791871&gtm=45je3bt0v9100486290z8813450493&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2110866848 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Tue, 05 Dec 2023 15:57:44 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	region1.analytics.google.com/g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=1&sid=1701791870&sct=1&seg=0&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=CMP_Wifi_Users&_fv=1&_nsi=1&_ss=1&tfd=872	216.239.32.36	204 No Content	0 B
URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=1&sid=1701791870&sct=1&seg=0&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=CMP_Wifi_Users&_fv=1&_nsi=1&_ss=1&tfd=872 IP 216.239.32.36:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=1&sid=1701791870&sct=1&seg=0&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=CMP_Wifi_Users&_fv=1&_nsi=1&_ss=1&tfd=872 HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://mtn-fun.cm DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 `HTTP/2 204 No Content access-control-allow-origin: http://mtn-fun.cm date: Tue, 05 Dec 2023 15:57:45 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	region1.analytics.google.com/g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=2&sid=1701791870&sct=1&seg=1&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=page_view&tfd=5879	216.239.32.36	204 No Content	0 B
URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=2&sid=1701791870&sct=1&seg=1&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=page_view&tfd=5879 IP 216.239.32.36:443 ASN #15169 GOOGLE Requested by http://mtn-fun.cm/CMP-CMMTN-UPSTR/prize3-fr-soi-wifi?nowifi=1 Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /g/collect?v=2&tid=G-2ZBNNX5REJ&gtm=45je3bt0v9100486290z8813450493&_p=1701791870257&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1341278446.1701791871&ul=en-us&sr=1280x1024&_s=2&sid=1701791870&sct=1&seg=1&dl=http%3A%2F%2Fmtn-fun.cm%2FCMP-CMMTN-UPSTR%2Fprize3-fr-soi-wifi%3Fnowifi%3D1&dt=&en=page_view&tfd=5879 HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://mtn-fun.cm DNT: 1 Connection: keep-alive Referer: http://mtn-fun.cm/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/3 204 No Content access-control-allow-origin: http://mtn-fun.cm date: Tue, 05 Dec 2023 15:57:50 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by