Overview

URLxcigamesdd.com/final-fantasy-xii-the-zodiac-age/
IP 107.6.168.100 (Netherlands)
ASN#32475 SINGLEHOP-LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-07 20:40:19 UTC
StatusLoading report..
IDS alerts1
Blocklist alert16
urlquery alerts No alerts detected
Tags None

Domain Summary (44)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
arsnivyr.com (8) 0 2022-07-08 12:33:37 UTC 2023-02-07 00:39:18 UTC 139.45.197.242 Unknown ranking
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2023-02-07 11:23:00 UTC 142.250.74.74
xml-v4.trafficmoose.com (1) 0 2022-07-11 16:37:25 UTC 2023-02-06 16:53:59 UTC 198.134.116.17 Domain (trafficmoose.com) ranked at: 360897
cm.everesttech.net (1) 996 2017-01-30 04:59:57 UTC 2023-02-07 04:09:40 UTC 54.229.62.148
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-07 04:10:04 UTC 34.160.144.191
ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2023-02-07 04:09:40 UTC 216.58.211.3
my.rtmark.net (1) 9054 2015-02-04 09:54:57 UTC 2023-02-07 17:41:10 UTC 139.45.195.8
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2023-02-07 04:09:40 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
www.nbfcs.org (18) 0 2022-11-17 14:12:53 UTC 2023-02-06 21:28:38 UTC 23.254.229.241 Unknown ranking
dpm.demdex.net (3) 204 2012-05-22 05:45:05 UTC 2023-02-07 04:09:40 UTC 54.217.75.251
ocsp.sca1b.amazontrust.com (2) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.39
analytics.linkmoe.org (2) 0 2022-11-10 13:40:18 UTC 2023-01-14 21:32:43 UTC 50.31.177.118 Unknown ranking
a1s-cdn.unibet.com (1) 283505 2014-04-23 15:07:51 UTC 2023-02-07 17:44:05 UTC 85.184.96.5
use.fontawesome.com (2) 942 2017-01-30 04:43:25 UTC 2023-02-07 04:13:29 UTC 172.64.133.15
unibetlondonltd.d3.sc.omtrdc.net (2) 444877 2017-01-29 21:05:05 UTC 2023-02-07 20:32:21 UTC 13.37.25.97
xcigamesdd.com (35) 0 2022-01-28 19:55:53 UTC 2023-02-05 03:58:13 UTC 107.6.168.100 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-07 04:09:08 UTC 35.83.81.40
linkmoe.org (1) 0 2020-09-07 02:28:42 UTC 2023-02-04 20:56:08 UTC 50.31.177.118 Unknown ranking
wishesobtrusivefastest.com (1) 372137 2021-08-20 14:47:01 UTC 2022-12-14 08:07:59 UTC 173.233.137.60
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2023-02-07 13:17:44 UTC 34.120.237.76
simplewebanalysis.com (1) 0 2022-02-25 04:06:25 UTC 2023-02-06 20:30:14 UTC 3.120.47.42 Unknown ranking
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2023-02-07 13:24:55 UTC 93.184.220.29
secure.adnxs.com (2) 396 2012-05-22 16:37:37 UTC 2023-02-07 04:15:46 UTC 37.252.173.215
unibet.demdex.net (1) 338024 2017-01-30 05:50:24 UTC 2023-02-06 19:48:19 UTC 34.241.134.251
cdn.bannerflow.com (3) 23819 2018-02-22 12:57:21 UTC 2023-02-07 17:16:12 UTC 104.16.174.188
ardslediana.com (3) 0 2022-08-02 20:38:47 UTC 2023-02-07 08:42:01 UTC 139.45.197.236 Unknown ranking
peeksdragoncontinually.com (2) 0 2023-02-06 02:35:57 UTC 2023-02-06 02:35:58 UTC 173.233.137.60 Unknown ranking
cdn.cloudimagesb.com (1) 23099 2021-02-12 16:15:41 UTC 2023-02-06 19:09:42 UTC 45.133.44.10
adserving.unibet.com (1) 98000 2015-05-26 06:56:53 UTC 2023-02-07 17:44:03 UTC 95.101.10.153
a1s.unibet.com (1) 297625 2017-01-30 00:44:42 UTC 2023-02-07 17:44:06 UTC 85.184.96.5
www.profitabledisplayformat.com (1) 0 2022-11-02 22:04:21 UTC 2023-02-06 11:48:35 UTC 173.233.137.52 Unknown ranking
www.unibet.nu (2) 0 2022-11-04 11:13:23 UTC 2023-02-07 20:32:45 UTC 85.184.96.0 Unknown ranking
welcome.unibet.com (18) 242429 2017-01-30 05:39:28 UTC 2023-02-07 17:44:04 UTC 104.18.25.188
outdilateinterrupt.com (2) 0 2023-01-23 11:54:48 UTC 2023-02-06 19:10:27 UTC 192.243.59.12 Unknown ranking
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-02-07 12:25:03 UTC 142.250.74.40
r3.o.lencr.org (17) 344 2020-12-02 08:52:13 UTC 2023-02-07 04:09:08 UTC 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-07 04:09:37 UTC 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-07 04:14:22 UTC 34.117.237.239
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-02-07 07:09:03 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
jennyvisits.com (2) 0 2023-01-06 10:51:25 UTC 2023-02-06 21:21:24 UTC 173.233.139.164 Unknown ranking
e2ertt.com (2) 310699 2017-01-29 22:24:02 UTC 2023-02-07 17:29:40 UTC 139.45.197.233
ajax.googleapis.com (1) 12905 2012-05-22 10:38:03 UTC 2023-02-07 14:54:48 UTC 142.250.74.138
script.crazyegg.com (1) 1992 2014-10-23 17:42:31 UTC 2023-02-07 04:19:35 UTC 104.19.148.8
bannerflow-feed-builder.azurewebsites.net (1) 659103 2017-11-23 13:27:15 UTC 2023-02-07 17:44:10 UTC 104.40.147.180

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-07 20:40:59 UTC 3  107.6.168.100 Client IP ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 ardslediana.com Sinkholed
2023-02-07 2 ardslediana.com Sinkholed
2023-02-07 2 ardslediana.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed
2023-02-07 2 profitabledisplayformat.com Sinkholed
2023-02-07 2 peeksdragoncontinually.com Sinkholed
2023-02-07 2 peeksdragoncontinually.com Sinkholed
2023-02-07 2 outdilateinterrupt.com Sinkholed
2023-02-07 2 outdilateinterrupt.com Sinkholed
2023-02-07 2 arsnivyr.com Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 107.6.168.100
Date UQ / IDS / BL URL IP
2023-03-05 21:29:38 +0000 0 - 1 - 18 xcigamesdd.com/super-mario-party-x4/ 107.6.168.100
2023-02-20 23:48:25 +0000 0 - 0 - 0 bloguers.net 107.6.168.100
2023-02-07 20:40:19 +0000 0 - 1 - 16 xcigamesdd.com/final-fantasy-xii-the-zodiac-age/ 107.6.168.100
2023-01-14 21:32:53 +0000 0 - 0 - 14 xcigamesdd.com/ 107.6.168.100
2022-11-26 23:48:01 +0000 0 - 0 - 26 xcigamesdd.com/the-legend-of-zelda-breath-of- (...) 107.6.168.100


Last 5 reports on ASN: SINGLEHOP-LLC
Date UQ / IDS / BL URL IP
2023-03-28 08:55:36 +0000 0 - 4 - 0 playingwithfire.biz/justarius.com/gallery/dap (...) 184.154.194.130
2023-03-28 07:43:15 +0000 0 - 4 - 0 playingwithfire.biz/justarius.com/gallery/ist (...) 184.154.194.130
2023-03-28 02:41:44 +0000 0 - 0 - 2 ntntrstb.com/ 184.154.201.82
2023-03-27 15:28:43 +0000 0 - 0 - 1 appleid-web.info/ 172.96.187.149
2023-03-27 11:52:37 +0000 0 - 0 - 0 palestinohistorico.cl 108.178.38.98


Last 5 reports on domain: xcigamesdd.com
Date UQ / IDS / BL URL IP
2023-03-05 21:29:38 +0000 0 - 1 - 18 xcigamesdd.com/super-mario-party-x4/ 107.6.168.100
2023-02-07 20:40:19 +0000 0 - 1 - 16 xcigamesdd.com/final-fantasy-xii-the-zodiac-age/ 107.6.168.100
2023-01-14 21:32:53 +0000 0 - 0 - 14 xcigamesdd.com/ 107.6.168.100
2022-11-26 23:48:01 +0000 0 - 0 - 26 xcigamesdd.com/the-legend-of-zelda-breath-of- (...) 107.6.168.100
2022-11-22 22:12:55 +0000 0 - 0 - 20 xcigamesdd.com/pokemon-legends-arceus-w1/ 107.6.168.100


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-25 08:32:19 +0000 0 - 1 - 10 134.122.25.101/razor/r4z0r.arm 134.122.25.101
2023-02-14 08:42:47 +0000 0 - 0 - 14 winiphone254.blogspot.com/2023/02/crypto-tops (...) 172.217.21.161
2023-01-26 10:08:00 +0000 0 - 0 - 4 teleline.site/m/ec/ppt1/ 79.98.29.29
2023-01-26 09:57:57 +0000 0 - 2 - 5 gdasaasnt.com/link?z=4356956&var={zoneid}&ymi (...) 139.45.197.239
2023-01-26 09:33:31 +0000 0 - 0 - 4 1d657f84ce6.clicks4tc.com/ 94.237.103.119

JavaScript

Executed Scripts (81)

Executed Evals (12)
#1 JavaScript::Eval (size: 29) - SHA256: b2ebc210c5c379879d07a4a9e046a4ea803d56dcc91d533db817ec272cbcfaf4
var dfc221c35e = Number('');
#2 JavaScript::Eval (size: 449) - SHA256: 9b52d936c792458b2b3db0bdc9e24a648979539a64a37b97b8aa4604e19e82fc
           if (typeof dfc221c35e !== 'undefined') {
               if (!isNaN(dfc221c35e) && dfc221c35e > 0) setTimeout(function() {
                   window.top.location = 'https://jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17632612';
               }, dfc221c35e * 1000);
               else window.top.location = 'https://jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17632612';
           }
#3 JavaScript::Eval (size: 132) - SHA256: 0a23e511994a2c03a725773de07810ff171878b9c0177f40a663038e4e251168
(function() {
    if (window.innerWidth) return window.innerWidth;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetWidth
})();
#4 JavaScript::Eval (size: 2116) - SHA256: dc67dc3bcfbeeb2fbadfcb2a3051454a21eaa2a8fd3f0573d375637569de6bfa
               (function() {
                   var bn;
                   if (bn = document.getElementById('atLink-e0545ea4e9fad86bbc397bc0cf40db8c')) {
                       var callback = function() {
                           (new Image()).src = '//peeksdragoncontinually.com/clk.gif?landing_id=2896938&placement_id=17596898&sid=H4sIAAAAAAAC%2F1RTv28cRRSeNQEKEBIIkCKEdAUFiWJndnf2FykQIRhFhMRKglLPT3vw3u5qZ%2Ff24ioQCaW0RJNy%2FTmJBUQRaaBCCmcaSIMvBXKBi%2FwLSEh06BxLB6%2BY933vm%2BJ7M%2B99tdUeEIqW7698Wm7YPOenoyU6ePeaLVTZucHFqwOfLtEzg2u2iNmZwXh21KP3fBot0RODj7VcL08H1KfUp%2F5g2dbalOPThypsdT%2FzlzK6xIIlP2IY1%2F%2FnrvXguAc1OiCvwarp82u%2FPoSVExTD789pt96U1amPhm3Om7LGSO18VqwXZVdgOIem9mCKnaPbKN2UkNsLKIudow5Qju7MOoCwU%2BL94UMUO0c2IUZ3nzkVOXQBoV5CN5pA57uwfAJZ3oRVewSQChcvoRjeu1jWHb%2F%2BTOUzdUqO%2Ff0XbDclx%2F58HcXwwdncjgdXyrxtbFk4jE0PO57Ark5QtbtoNjzYbhey%2BRJWERTDHlbtvxNn2md%2BJhcTloWLzMhsMYu0vxj6WWRSzcKUscOnsXYCaybI9Sa4W0DrPLTWQ2s8tJWHodof8CgzlCZGmDBMmZQyDKWM0lhFKmSpoWjlzPsmmmoTMt%2BErG%2Bgqm9g3X69d%2FznvVeWp4Q8%2BQd1%2Bwhubf9RFsc6NErJVPOAh5mJ0sREYShpyJWvspRHgQhCGuuIGd8wagyXoZ8IqYLMBEmSaBnIVGudZqGI0igyVCeaUsFEyCPK%2FNBEKqCUJ0JxPxGChaGfBmkWJWlKU58bnsUiYJz6oUqoEX4gTJhRxplIqIpSbkzGgphFCQ25r2QQUK79RJnIxIbBKQ%2BuIRipHp0m6BxBxwk6S9A1BN2ov6tyF7j%2BnspdK%2FyjHBzlsN8um9UtfrdsVnVBtqoD8urs872Xv3iKdb0%2F0DRikeZMZ4arNBZChlkiJJWGUSVSCWd7WLcA7jxs2Cl5%2B4cWlZ2SBXsbgu%2FC5buQ9g3w9i3wbpvFKfgaYoqN4sFY2lU%2B1E6pJVkOocoeVXMMzXVvKz8gxw%2Bn8BQ7CS0fk6OArHtUdY%2FP7S8Eq%2Fmt7ctlR%2B5cLjtHHl6qGju0G3w2oVca3ugXvv1EX%2B%2FKWp0%2F5za%2F%2BUDOhBm8f1W75gIvlC1WHfnurFVK18tlLTX56by7psVK69bOtnXRVhdWPlw%2BP6xq7Zwtiwm43dO%2FQdopefHElcPde3Pld9h6grrtMWznTm05gaxuwFXzmisJ6nzORUXQtf12HYh5MbcEuZ5zLnq4%2F3Axx1vuFlZrD7y5ebhxo7rHKO%2FB80249rntpqofv%2F8kPAyI3NsWeU3uiLye6XZ%2FkIosMpmJo1QmiQmDmEYRVSo1wnBBmUDjpvLpjyf%2FBQAA%2F%2F8BAAD%2F%2F6aa7FpOBQAA&psid=';
                       };
                       if (bn.addEventListener) bn.addEventListener('click', callback, false);
                       else if (bn.attachEvent) bn.attachEvent('onclick', callback);
                       else bn.onclick = callback;
                   }
               })();
#5 JavaScript::Eval (size: 61) - SHA256: 9259355921509ced00b4d7d3e76c151037a06c88a646cd7d47d5d9c96984697c
(function() {
    return window.functions.timeParting("n", "0")
})();
#6 JavaScript::Eval (size: 55) - SHA256: 14986cbd70f8b8a1770adf9800c113847daf392c2999dfff9dc71d2be98f3282
(function() {
    return visitor.getAnalyticsVisitorID()
})();
#7 JavaScript::Eval (size: 54) - SHA256: fc490a09c28110ae2a7c965801ebeb5c572587f55c3524889f547dbcc34c1d81
(function() {
    return screen.width + "x" + screen.height
})();
#8 JavaScript::Eval (size: 135) - SHA256: fc7b851f30df68c5cc6d1fb3f06c300b2b1d7271f76cc187224050270141f0ed
(function() {
    if (window.innerHeight) return window.innerHeight;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetHeight
})();
#9 JavaScript::Eval (size: 62) - SHA256: adf0ca592504ef680d5ea02d5161b15be0572fd3e5b41d152b74f0c76aea6c42
(function() {
    return window.functions.getPageNameOldEvar1()
})();
#10 JavaScript::Eval (size: 71) - SHA256: dcdd7e7e286c45c94638f28053384616d6ca9a1b396b0109cb51f1298ba342bb
(function() {
    return Math.round((new Date).getTime() / 1E3).toString()
})();
#11 JavaScript::Eval (size: 88) - SHA256: 5e05e2cf30322e8f71d65a22aa5f4a095923b67286a61d83b7787e3468f42f62
(function() {
    return "LP:" + BF_prop.LandingPageName.toString().replace(/:/ig, "").trim()
})();
#12 JavaScript::Eval (size: 60) - SHA256: 9d51544cc513110b130345a977b1e9e630b5a7aa01518f7f7898758b79a9699f
(function() {
    return visitor.getMarketingCloudVisitorID()
})();

Executed Writes (3)
#1 JavaScript::Write (size: 50) - SHA256: a2b051fa7d206df6e4eeee27678781de0752c1ac7adcfd359c1a2fc7ff507449
< script src = "/widget/betslip/betslip.js" > < /script>
#2 JavaScript::Write (size: 123) - SHA256: ed2dc11f2ef0bfebbb5268a5435413bdb9039280d2e4c7eed932f830b6fb6b42
< script type = "text/javascript"
src = "http://wishesobtrusivefastest.com/e0545ea4e9fad86bbc397bc0cf40db8c/invoke.js" > < /script>
#3 JavaScript::Write (size: 128) - SHA256: e73a1d3cc1984f234babd6110f66e6569b4ac8382b997af002a0a95303145988
< script type = "text/javascript"
src = "http://www.profitabledisplayformat.com/31224abe9de8da03816b59f2882025e3/invoke.js" > < /script>


HTTP Transactions (177)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12262
Expires: Wed, 08 Feb 2023 00:04:29 GMT
Date: Tue, 07 Feb 2023 20:40:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14238
Expires: Wed, 08 Feb 2023 00:37:25 GMT
Date: Tue, 07 Feb 2023 20:40:07 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 20:34:09 GMT
age: 358
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8771
Expires: Tue, 07 Feb 2023 23:06:18 GMT
Date: Tue, 07 Feb 2023 20:40:07 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: QtvIDmGZ0mcC74+QtghSaFrHLf0tuZ+Eqy31k5OrDPABI2P4/GEr8CvwNay71kEIMOdAB3odGHFiBVwhFizUww==
x-amz-request-id: T5DPK7KFKACHFYD9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 19:45:41 GMT
age: 3266
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:07 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 19:51:19 GMT
age: 2929
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12103
Expires: Wed, 08 Feb 2023 00:01:51 GMT
Date: Tue, 07 Feb 2023 20:40:08 GMT
Connection: keep-alive

                                        
                                            GET /final-fantasy-xii-the-zodiac-age/ HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-pingback: http://xcigamesdd.com/xmlrpc.php
link: <https://xcigamesdd.com/wp-json/>; rel="https://api.w.org/", <https://xcigamesdd.com/wp-json/wp/v2/posts/6327>; rel="alternate"; type="application/json", <https://xcigamesdd.com/?p=6327>; rel=shortlink
cache-control: public, max-age=0
expires: Tue, 07 Feb 2023 20:40:08 GMT
x-litespeed-cache: miss
content-length: 65654
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (37093), with CRLF, LF line terminators
Size:   65654
Md5:    f4c8f7021558edc186efd77f3f6b07dd
Sha1:   78e223a357fb390cd2b69c9450a1712596b50e01
Sha256: b3fee3471b75850fa76fb0016118ce3e6a8cae621ae439bb986eed58d82c8e9d

Alerts:
  IDS:
    - ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
                                        
                                            GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css?ver=2.5.0.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Wed, 23 Nov 2022 15:58:36 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11759
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   11759
Md5:    be7f4c7d5b01eeb9658f928317e6d6b4
Sha1:   8f7d25b03481d045dc2f87119959459630265351
Sha256: ba0ad71c3596a80cc6dc24f6c8c4ae90693cdcda8c02c314cec234860f785b04
                                        
                                            GET /wp-content/plugins/contextual-related-posts/css/rounded-thumbs.min.css?ver=3.3.0 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 463
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1451), with no line terminators
Size:   463
Md5:    245e525ddd673a0a9a7ebe8a1a32eb00
Sha1:   68410696a60f51dcb5df8fa9d0c0ef96879197e8
Sha256: 94db2ea5cd36e9dd7e7758bd12e65e7b19d96e87488b5aadafccde60884f917a
                                        
                                            GET /wp-content/plugins/responsive-accordion-and-collapse/css/font-awesome/css/font-awesome.min.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 10 Jan 2023 12:36:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4653
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (20604)
Size:   4653
Md5:    2cb90fac97922f17341da79b40c6fd8b
Sha1:   d5b9b24bff8cba81e5c345483e7a107414325b43
Sha256: dc1a9cc5dbad4697419ba2abcf7a4789657a718177f1974b6e36838dfac517e0
                                        
                                            GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=7.5.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 2502
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (7867), with CRLF line terminators
Size:   2502
Md5:    479be9c9eaae52e708427b9a10f93c74
Sha1:   cf1ce06e44128a534ad055df459203f9327792bb
Sha256: 9cde3a5c42776209eeeb96d0ebbd67a391d507cc1b784f85a41750726b886535
                                        
                                            GET /wp-content/plugins/if-menu/assets/if-menu-site.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Mon, 27 Jun 2022 03:09:31 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 491
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   491
Md5:    9dc75495a901b0f89baf50f2fb963f4e
Sha1:   948f3e9c570f041c440a58cccd2485a1b09b203e
Sha256: b5d3cd652f4d5c2a8d565ed3cb3b9fec781ddaa0d296ce4fc07a628e97a6513d
                                        
                                            GET /wp-content/plugins/wpdiscuz/assets/css/wpdiscuz-combo.min.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 6408
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (22067), with CRLF line terminators
Size:   6408
Md5:    c56b52ad8d5d281d27b289c653412011
Sha1:   b058212077e22f09e45762ead45ea412c3944ab8
Sha256: a8136d873a059090634b4b01cf7a958551522efd5508d933986bd59243642687
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: d2c1XECg0QKUfj29k2BERA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.83.81.40
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PZ48uFGG/ScnEzfFdkcKu42S2BQ=

                                        
                                            GET /wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css?ver=5.8.0 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 28 Jul 2020 23:30:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 20413
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (42471), with CRLF line terminators
Size:   20413
Md5:    e1a90e1a59f0501563ad5915ad7d3861
Sha1:   bb806e4914f278c7e77ce186a5d73fff6b9aff88
Sha256: 0d878b4af92bf67eaaf8fb1d52d4ae908d31d3cd8a6660328acb15dac84b39b3
                                        
                                            GET /wp-content/themes/orbital/assets/css/main.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11233
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (55626)
Size:   11233
Md5:    8b0b80e1670e19e21b21518fc248ecdd
Sha1:   5d9eff9ea9ae4875fff2e8d9f5a005dc6e926be5
Sha256: ad4698f12c9b9c535bd1d7077065806bf3a9690c1a1a02f5dc66afd9b1dc1bb3
                                        
                                            GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.1.4.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 01 Nov 2022 12:28:04 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1786
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (8319)
Size:   1786
Md5:    0689a6c3f80a5459a071f1011cdf3960
Sha1:   f7422ba0692c1615df809d59cda5d66b992d8061
Sha256: cb30e5065929317605de07d6d5b68dddf00674132ffd71e153f844d469fe5ae5
                                        
                                            GET /wp-content/plugins/allow-webp-image/public/js/allow-webp-image-public.js?ver=1.0.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 22 Mar 2022 02:01:23 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 475
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   475
Md5:    f18f244bed87a1ae2819af17fb2766cb
Sha1:   07add1b1b35612815df2f7a491dff60ab34507f5
Sha256: 8b772d78e109484da06c428e7c6f3de1ab9f9128313cad7be43088c2a70d7755
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 10 Sep 2022 21:42:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4168
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4168
Md5:    c41f3a82e911de81a1817131069bc7d2
Sha1:   1e883290a0b794916cead41e5f0705716fd77b89
Sha256: e9791f24770f098ea30bb4d25e2e10bdedb97132d0bbf7d2bd79eedac22efa27
                                        
                                            GET /wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.1.4.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 01 Nov 2022 12:28:05 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 4588
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1003)
Size:   4588
Md5:    93d7cb00bbc250edd78c272982b90307
Sha1:   4328c70a78dc96b27b643861d2ba762444a14aa4
Sha256: d49120a793bef2442eb9d233a1e1fc6f6ecb2851e2a8ecc5c6f79985f858a1a3
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 10 Sep 2022 21:42:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 30969
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30969
Md5:    554969c8ed0e4b5eece1261c4e1e9cd0
Sha1:   3b514b21c2e26b2caa15054e43ed00184a8ebc38
Sha256: 4a10709ca76c5112fbaf69e065b4ef93dd37bcffd4ae39b351e56d40c9322123
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 10 Sep 2022 21:42:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 11658
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   11658
Md5:    9f76c05d4aec8a23bbb9131800060916
Sha1:   ba854132574f3add765c016ff6cef2a30bddc5e0
Sha256: c73bcff8e403046219e8f9dfb99e029b8d58099b8c5fb5f6508127702fd1b275
                                        
                                            GET /wp-content/plugins/wpdiscuz/themes/default/style.css?ver=7.5.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:53 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 19473
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1959), with CRLF line terminators
Size:   19473
Md5:    97608c1aec6c4dade4b43610748f060a
Sha1:   c1216cb0eb34dfbc9564db3cd3e50ea73ef41609
Sha256: 081191c3e4082a4a6b5f6688436300eac533d2899ab72fd68f7ea04435e8c323
                                        
                                            GET /1?z=5382937 HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         139.45.197.242
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
X-Trace-Id: 0e1ac6126ce240773b2c1c785ff76e0b
Access-Control-Expose-Headers: X-Sc
X-Sc: cM1vJrH_F93buEBhGl24aL46WnFxR4AlTLRnJoXMAmTCjFCI4I3kLeeBFWRMxeEv-SB7_HNu8eFFFZQisdML-tEKAWw=
Set-Cookie: scm=1; expires=Wed, 07 Feb 2024 20:40:08 GMT; secure; SameSite=None OAID=ed978667c07b4f4798c8a702aaaac462; expires=Wed, 07 Feb 2024 20:40:08 GMT; secure; SameSite=None oaidts=1675802408; expires=Wed, 07 Feb 2024 20:40:08 GMT; secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (17093)
Size:   7048
Md5:    3ca66a286bf362ce94ef0c3f75efcc68
Sha1:   04e9fc9e231cfef49ebf04f6fe765e80fc3d3e40
Sha256: 3b2a3752e2c84af26aa16561db1a921ad90d192d47e9772fa899d2a2614d362d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/koko-analytics/assets/dist/js/script.js?ver=1.0.37 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:09 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 697
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1015)
Size:   697
Md5:    3c5122e0e4f76e86a686abb0b1aa9a30
Sha1:   83ce09efe372d3523b4ba0e479939596c3714586
Sha256: ee375a8cf76fa1b6729f25dfef9756e96c47317aee4fc1282cdfef9f3b9374df
                                        
                                            GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js?ver=2.5.0.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Wed, 23 Nov 2022 15:58:36 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 6730
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (12198), with CRLF line terminators
Size:   6730
Md5:    2e22c8149399e73ff0da65402d803699
Sha1:   129f97cae31d3d3dca417341ec415d2303dce30b
Sha256: 114ee3bb4212ea8f6d7d9d10c786a684674a4973b9b938c21b0f7e8aaa5b5971
                                        
                                            GET /wp-content/plugins/responsive-accordion-and-collapse/css/bootstrap-front.css?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/css; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 10 Jan 2023 12:36:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1572
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   1572
Md5:    80bced94327e5768680e9eaa99458c7a
Sha1:   a7a4a0b80521d015572c968a73bf4f666ecd3300
Sha256: 02a566fe43f6cebf0d491eb007147939c867a42af384bc5d276477aca528cfc5
                                        
                                            GET /wp-content/uploads/2020/07/mega.png HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         107.6.168.100
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 07 Jun 2023 20:40:08 GMT
last-modified: Wed, 29 Jul 2020 00:05:11 GMT
accept-ranges: bytes
content-length: 18354
date: Tue, 07 Feb 2023 20:40:08 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 368 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   18354
Md5:    83e8f8608d41ab78b1576cbfd4b88ecb
Sha1:   39024b7093764cc1bbbd964a70da3aabf1db7bf3
Sha256: 52f170c9a428acc1b5c7873dd2ec43bc9e6705c7fd29980581d09af8c472ee29
                                        
                                            GET /wp-content/plugins/pt-content-views-pro/public/assets/js/cvpro.min.js?ver=5.8.0 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 28 Jul 2020 23:30:03 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 46186
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32126)
Size:   46186
Md5:    0aec5f99695007286dc53e9e8a1c2c70
Sha1:   80eeeb6ee67b570ee83e254e566ab5ae40191e13
Sha256: d612d876e075d3811706cc42f6ec102c9ead6cacc80e574f6f8c5f17c6bd43e8
                                        
                                            GET /wp-content/plugins/easy-affiliate-links/dist/public.js?ver=3.7.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 24 Jan 2023 13:02:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 7150
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1004)
Size:   7150
Md5:    6d6bc1b948a9e8016ed5733b65f0f8d2
Sha1:   9dde6af420a147c905f5b2aaf35753c97f8e322d
Sha256: f92fbcbd02da631a978569076d1f2c6987b797322747d876ba8e3f9486b56737
                                        
                                            GET /wp-content/uploads/2022/09/Final-Fantasy-XII-The-Zodiac-Age.webp HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         107.6.168.100
HTTP/2 200 OK
content-type: image/webp
                                        
cache-control: public, max-age=10368000
expires: Wed, 07 Jun 2023 20:40:08 GMT
last-modified: Wed, 14 Sep 2022 11:29:15 GMT
accept-ranges: bytes
content-length: 14198
date: Tue, 07 Feb 2023 20:40:08 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 320x420, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   14198
Md5:    4e7b836a0a0615384d0842d4d7188982
Sha1:   14098062732ff825d15de096f66c52f41e99dbcc
Sha256: b6eb154920041b2dd3381d035646733b775d0f30012ae00851365def09294ce9
                                        
                                            GET /wp-content/themes/orbital/assets/js/navigation.js?ver=20190101 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-length: 0
date: Tue, 07 Feb 2023 20:40:08 GMT
vary: Accept-Encoding

                                        
                                            GET /wp-content/plugins/responsive-accordion-and-collapse/js/accordion-custom.js?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 10 Jan 2023 12:36:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 13543
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   13543
Md5:    66128ed473376811d98162f76cfbfb73
Sha1:   981e2a4e931ba3e552ed76d1570cbcca3ec165aa
Sha256: 494c49d9fae9e3e951e7d84a5e2274b3d804a8e5dc6fd8b69ffeb02d0b36d8ed
                                        
                                            GET /wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.0.3 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Tue, 10 Jan 2023 12:36:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 206
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (409), with CRLF line terminators
Size:   206
Md5:    c9fc246cc82759202472df0d2b598db4
Sha1:   1e7c1dac85ee36c0becb07515ad602946efb2e21
Sha256: 7ffd4a4d3620f7b6e868fdb809fd5aa47330241f03b3b991bde3ad5c03317ca2
                                        
                                            GET /wp-content/themes/orbital/assets/js/social.min.js?ver=20190101 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 2622
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (6521), with no line terminators
Size:   2622
Md5:    e4cd24c4790b9aa939d63faf551e7cea
Sha1:   356cccc76e8254e79ca93e547a1b278c02c14c8f
Sha256: b388508e87fecdb8b25850685793e09ca2608db1990ad31ced923795e24d16ca
                                        
                                            GET /wp-content/themes/orbital/assets/js/main.js?ver=20190101 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Sat, 29 Jan 2022 15:58:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 1448
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   1448
Md5:    2f0b0bb5aa7056365134163018b2c575
Sha1:   3ae8af3913ac9842c2b10fe1b7492a36849dbf33
Sha256: db0f85bf0e90832fe96638d57f3cfae9b3904a0076366324d97c6b454b4f3d83
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1669984039 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Fri, 02 Dec 2022 12:27:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 3067
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   3067
Md5:    72f944fa9f4713400b38da041103611c
Sha1:   5e1c657423fe27ca5e638551c11df1d6e4e35233
Sha256: 97eeb7122cbbb40ed38aeed85a237aefb63db40d7e33b548b33e885fa24fbb17
                                        
                                            GET /wp-content/plugins/wpdiscuz/assets/js/wpdiscuz-combo.min.js?ver=7.5.1 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000,public
expires: Wed, 07 Feb 2024 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
content-length: 71302
date: Tue, 07 Feb 2023 20:40:08 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (62916), with CRLF line terminators
Size:   71302
Md5:    4c3bcf532a33122a20c1e925ebacd534
Sha1:   fe2462539eb71eae8cb7fde1948e9bf2c9197792
Sha256: f59b30ca3830653703a3652b1ee1579394f178241325f2f33588f646f7e2df88
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /5/5260642/?oo=1&aab=1 HTTP/1.1 
Host: ardslediana.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         139.45.197.236
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: a78ae7601f756d8ad6d0bbeb6383c218
Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:08 GMT; path=/ oaidts=1675802408; expires=Wed, 07 Feb 2024 20:40:08 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2754), with no line terminators
Size:   1330
Md5:    7615276c436da055076175453a282983
Sha1:   f98d58d9bc66362eaf7a0e835ffa9955183242ca
Sha256: b7d93fc77e21e9dff63c9ee1c14b69b1eefeb10c788d4408b5630548402dacf3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /tag.min.js HTTP/1.1 
Host: ardslediana.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         139.45.197.236
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:08 GMT
Content-Length: 25181
Connection: keep-alive
Content-Encoding: gzip
X-Trace-Id: ddc34e3c87112d8439d8b928b97e63ec
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Accept-Ranges: bytes
Last-Modified: Mon, 06 Feb 2023 12:52:10 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   25181
Md5:    7dae573634d4eb9b2d64d806d3c8f291
Sha1:   e92e04c80c303194c998c22990bbb40327fd34af
Sha256: 4f08240ac8f0bf158e2977fa184bd5e527c05a246918244e4d5ac5b32f357818

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /js/full-page-script.js HTTP/1.1 
Host: linkmoe.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         50.31.177.118
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=2592000
expires: Thu, 09 Mar 2023 20:40:07 GMT
last-modified: Tue, 30 Nov 2021 01:45:16 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 759
date: Tue, 07 Feb 2023 20:40:07 GMT
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (2161)
Size:   759
Md5:    54c907e14e23f8ce889d1c1f08c5a08c
Sha1:   d62dc80f03342ba9f129b9ebae6d3a71a4d32812
Sha256: fe51e89770bbad259e95e979095088225f031c6c2047c7abaa45a05fd70afc18
                                        
                                            HEAD /final-fantasy-xii-the-zodiac-age/ HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-pingback: http://xcigamesdd.com/xmlrpc.php
x-litespeed-tag: 229_HTTP.200
link: <https://xcigamesdd.com/wp-json/>; rel="https://api.w.org/", <https://xcigamesdd.com/wp-json/wp/v2/posts/6327>; rel="alternate"; type="application/json", <https://xcigamesdd.com/?p=6327>; rel=shortlink
x-litespeed-cache-control: no-cache
cache-control: public, max-age=0
expires: Tue, 07 Feb 2023 20:40:08 GMT
date: Tue, 07 Feb 2023 20:40:08 GMT
vary: Accept-Encoding


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  IDS:
    - ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
                                        
                                            GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://xcigamesdd.com/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=7.5.1

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: font/woff2
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=10368000
expires: Wed, 07 Jun 2023 20:40:08 GMT
last-modified: Thu, 08 Dec 2022 06:42:55 GMT
accept-ranges: bytes
content-length: 79444
date: Tue, 07 Feb 2023 20:40:08 GMT
vary: Accept-Encoding


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 79444, version 331.524\012- data
Size:   79444
Md5:    b15db15f746f29ffa02638cb455b8ec0
Sha1:   75a88815c47a249eadb5f0edc1675957f860cca7
Sha256: 7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF9ED274A8026EA08F348145695717B6F8A11FA8F3C14E60B30B4CD60F7E2FDE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14060
Expires: Wed, 08 Feb 2023 00:34:29 GMT
Date: Tue, 07 Feb 2023 20:40:09 GMT
Connection: keep-alive

                                        
                                            GET /gid.js?userId=5ff1faa9a5aa4564afe13951f799179f HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.195.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
content-length: 65
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   65
Md5:    07eddf3483998df2efca121dfd95df8f
Sha1:   4b0643bc32931c86d86f7c74e7ca69a8eedc94c2
Sha256: e4f8537128779bbe87dcb535743dbc41903d7bea66dee4272ea692c81ce8a467
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F1AC2F432B0FD6F5F5600848782C04FBC739A6A922B8166EA2E1CE90582C3E3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1204
Expires: Tue, 07 Feb 2023 21:00:13 GMT
Date: Tue, 07 Feb 2023 20:40:09 GMT
Connection: keep-alive

                                        
                                            GET /?rb=xY_vIxWd0Ye6dANQaDgjf2T7AG1EhqdEDEsDIevmWRAE5LAfCAilj1sDT1KUn7-pA6AnhZyMtphIFUGPOvkJ4UXhs2IcunwpWUB6WLaVqcfQBDY3mkruo43CbErxmmrAoP-MmH6nL__-xW8gNxiFt4XJ8vTGVyRZwEbpQh9c69gNPydoXl5j8LnafBYSoMb4Oshk3EgstC2lqlXjiS0fTJnp-vecp2lkAGaVh6p0HoY%3D&request_ab2=0&zoneid=5260642&js_build=iclick-v1.482.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.482.0&bs=d6e49610-72af-4dc6-8042-da9404b0558f&userId=5ff1faa9a5aa4564afe13951f799179f&m=link HTTP/1.1 
Host: ardslediana.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive

search
                                         139.45.197.236
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 4f10882fff9ecbcb181e90bd4359a4c3
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:09 GMT; path=/ oaidts=1675802409; expires=Wed, 07 Feb 2024 20:40:09 GMT; path=/ syncedCookie=true; expires=Tue, 14 Feb 2023 20:40:09 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1773), with no line terminators
Size:   1421
Md5:    137e3a198f19a8054093ee19889286f6
Sha1:   9ab00b7c7a0a012d6e79758ca609920c18722d9b
Sha256: d3857031fa00945a349687f4b65e5dfab6863d497c6c46d83cfbc13cb288df7e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /e0545ea4e9fad86bbc397bc0cf40db8c/invoke.js HTTP/1.1 
Host: wishesobtrusivefastest.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         173.233.137.60
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 85fde8796c86b94777a7aeda38facd14
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26961), with no line terminators
Size:   9786
Md5:    9d19440f054f1ca158b0bd2a27ebbcac
Sha1:   56d93322fcf3dd29b7044ac445f71190661dbab8
Sha256: 79b7b97bd9e0fca8c88d23fda191712d60b0bd1f8bd0f0a343dd38f0e2577e3b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15665
Expires: Wed, 08 Feb 2023 01:01:14 GMT
Date: Tue, 07 Feb 2023 20:40:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15665
Expires: Wed, 08 Feb 2023 01:01:14 GMT
Date: Tue, 07 Feb 2023 20:40:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15665
Expires: Wed, 08 Feb 2023 01:01:14 GMT
Date: Tue, 07 Feb 2023 20:40:09 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ovhdLaEGaDSC8X0F9VamLw0KyBPWkxfYg5pssOT8NOZP4IBtNk6Gfw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
age: 81890
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4227
Md5:    eedb4de12585c70ddb5b8f94fe6a59e2
Sha1:   83c9437e71a0a03b3e8ff652155a85eafa76cdda
Sha256: d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qbUWAiTEzfmIOkYgKdBEYxEnRky5wA7ajMWumei7fXeIqLN9B-riBw==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:27 GMT
age: 81882
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7183
Md5:    92008e687831334af1cdbf4b8a57579f
Sha1:   e6ff750f12836637adf5b253d64c2102fdf3c180
Sha256: 39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _D5bI_flPN8fUn6aTGqO76FRSDwwC379nkVCBptmZkALErIVFCZfpA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
age: 81890
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12682
Md5:    59419fb1cf4689bed183d0e9a6aed782
Sha1:   47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
Sha256: e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 81DTnHIh40lNEi6l5hC87Vo9R8k4w79Fr71zibyvGP0iJm4kmhWITA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 07:45:27 GMT
age: 46482
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13160
Md5:    003fc35e140a75a12b7795c3986426ec
Sha1:   da002b22e2a01f48a545b369d4403eabb17a10d5
Sha256: bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5634
x-amzn-requestid: c380f2eb-c707-4086-9646-179ea89ba210
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy9JKEpqoAMF9RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dddbd4-49510561740468ba7b39f211;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 04:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hd-80HyDODhg3rMITXLtCrpBlekGjwi8C063w297vY4HUl2VbOj0Nw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 15:41:12 GMT
age: 17937
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5634
Md5:    cf292b03a5db7eb8e0660a518f41233c
Sha1:   8fa486cdecffff8a663da2df88227ee784c298a2
Sha256: cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13390
x-amzn-requestid: e7653b49-3160-42e3-8292-8ae32604f775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc8KEoPoAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0eb4-68fd76a95ffa656318bedff6;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KaitXsesZ9mJducJ54ChzQGfb-2-hEN4W_QojGMKXYEji4xsjNdWCA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 09:07:41 GMT
age: 41548
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13390
Md5:    75b0935816ca54d5d20a9fffa5531e0d
Sha1:   bd8374980c16b7d5a28e55b8bef2215713b1ebb2
Sha256: 4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
                                        
                                            OPTIONS /9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=5ff1faa9a5aa4564afe13951f799179f HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.242
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /g/collect?v=2&tid=G-LTBNRSB0H2&gtm=45je3260&_p=1093059062&gdid=dZTNiMT&cid=2132799029.1675802460&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675802460&sct=1&seg=0&dl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&dt=Final%20Fantasy%20XII%3A%20The%20Zodiac%20Age%20XCI%20NSP%20NSZ%20Download%20%7C%20SwitchXCI&en=page_view&_fv=1&_nsi=1&_ss=2&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: http://xcigamesdd.com
date: Tue, 07 Feb 2023 20:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 20:40:09 GMT
Last-Modified: Tue, 07 Feb 2023 20:06:03 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0J6CvCuhYpV1fGxagWOdzeq6Qf97eIZhAWpgicLh0DSx6Oqp8eIOjQ==
Age: 2046

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         3.120.47.42
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Tue, 07 Feb 2023 20:40:09 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
set-cookie: uid_id2=69e1419c-7493-4fc9-95e1-3195f8e43844:2:1; expires=Fri, 04 Feb 2033 20:40:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    f4550c4a669f360c5c638d8bcc60101d
Sha1:   68b30adb2686872934922c208c5e8c70a2ff7bbf
Sha256: 558ed509f2497faba46fa910f97e224181522670e863b7dd04688bac8a5bf70f
                                        
                                            OPTIONS /11?rnd=3182426496&z=5382937&b=15763363&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=3IcwNEgudkq5pJo17wrbWvRwu7uXRVuAm4Dfola3u9PsTgdi6Li8sOBmluohg7-JalqepZXLBr9hcUo-Z645YCqXsP91xkbGdLt_FnReSmPGYqEmdxH6KVhWvQ5J83-1Eq-d18TeFg2f1VvnA4L6_pLX5J2zxKkPgM_5z5-i2m9eJcuugPA_isLHcyzSJG1p9A5tT-otGxEC8tCDy79ZougPbfBAVOSvCGkssZ-bp_BmQAy8Hex92QaWQJPOJtB0rY7Y4aA4o5okK3iQ4JUO3nD8Olmq5UEg7SxLxI8hdAgCdONby4nUMSWUl_lYUyyqhrMSzHJ4i7T7-p5QmhDwnKjTbGDAqJFfceKpK2gDVZxjxWUO7GkUxc8UcWtEHg7Vqbw55bAUCNkLCRAMX4xfu9KJjldIg_xZaB5fGvs8JLOk4VNkL2ljQGVRzb1kueyFUYU1HKyxpaZ6zA-ClAPfTibjlnw9m6zg0iksOU9FzyAXKH8GYOj1y7ZpkjsnD-HWEvMfH2ysgzm-s4MMGXWVTgi5NijBY1SJ8pV_gPxb8WyUSHr-B_xwaHTFWC7fAslVsOlIe3iB9rAc717N9PNSupVS79G5wLDYc4zGImlbJsuP4i-vctILgd_IK8RIBfpgTaFeZOpD3ueDVi2p6sAuxQ==&ruid=1f2fc3a7-18c8-4397-bbca-73ffafef7367&subid=646924800784084992&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=245 HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-sc
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.242
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /9?z=5382937&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&oaid=5ff1faa9a5aa4564afe13951f799179f HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 343
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.242
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: f6d140127ee375666b167c7ed5b097d0
access-control-expose-headers: X-Sc
x-sc: gLEksGxzwzAlWOKlqUFdFTAnvP49hOYbBPEUwjcuubV-mIrR1s_LCX7qwtTcNpJm6snB7lF7DWLkTY-WJHgF3LV8BEc=
set-cookie: scm=1; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None OAID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None oaidts=1675802409; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (6545), with no line terminators
Size:   2604
Md5:    2a239c2925e3494b948bb54587615341
Sha1:   4548011dcdd6502f32d830f864afbefe299b0c7b
Sha256: de28b8c56d0490041a5420f34815f2b3f3ed4019e03b9362499f8561c76f0e26

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            OPTIONS /11?rnd=3182426496&z=5382937&b=15763363&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=3IcwNEgudkq5pJo17wrbWvRwu7uXRVuAm4Dfola3u9PsTgdi6Li8sOBmluohg7-JalqepZXLBr9hcUo-Z645YCqXsP91xkbGdLt_FnReSmPGYqEmdxH6KVhWvQ5J83-1Eq-d18TeFg2f1VvnA4L6_pLX5J2zxKkPgM_5z5-i2m9eJcuugPA_isLHcyzSJG1p9A5tT-otGxEC8tCDy79ZougPbfBAVOSvCGkssZ-bp_BmQAy8Hex92QaWQJPOJtB0rY7Y4aA4o5okK3iQ4JUO3nD8Olmq5UEg7SxLxI8hdAgCdONby4nUMSWUl_lYUyyqhrMSzHJ4i7T7-p5QmhDwnKjTbGDAqJFfceKpK2gDVZxjxWUO7GkUxc8UcWtEHg7Vqbw55bAUCNkLCRAMX4xfu9KJjldIg_xZaB5fGvs8JLOk4VNkL2ljQGVRzb1kueyFUYU1HKyxpaZ6zA-ClAPfTibjlnw9m6zg0iksOU9FzyAXKH8GYOj1y7ZpkjsnD-HWEvMfH2ysgzm-s4MMGXWVTgi5NijBY1SJ8pV_gPxb8WyUSHr-B_xwaHTFWC7fAslVsOlIe3iB9rAc717N9PNSupVS79G5wLDYc4zGImlbJsuP4i-vctILgd_IK8RIBfpgTaFeZOpD3ueDVi2p6sAuxQ==&ruid=1f2fc3a7-18c8-4397-bbca-73ffafef7367&subid=646924800784084992&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-sc
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.242
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /11?rnd=3182426496&z=5382937&b=15763363&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=3IcwNEgudkq5pJo17wrbWvRwu7uXRVuAm4Dfola3u9PsTgdi6Li8sOBmluohg7-JalqepZXLBr9hcUo-Z645YCqXsP91xkbGdLt_FnReSmPGYqEmdxH6KVhWvQ5J83-1Eq-d18TeFg2f1VvnA4L6_pLX5J2zxKkPgM_5z5-i2m9eJcuugPA_isLHcyzSJG1p9A5tT-otGxEC8tCDy79ZougPbfBAVOSvCGkssZ-bp_BmQAy8Hex92QaWQJPOJtB0rY7Y4aA4o5okK3iQ4JUO3nD8Olmq5UEg7SxLxI8hdAgCdONby4nUMSWUl_lYUyyqhrMSzHJ4i7T7-p5QmhDwnKjTbGDAqJFfceKpK2gDVZxjxWUO7GkUxc8UcWtEHg7Vqbw55bAUCNkLCRAMX4xfu9KJjldIg_xZaB5fGvs8JLOk4VNkL2ljQGVRzb1kueyFUYU1HKyxpaZ6zA-ClAPfTibjlnw9m6zg0iksOU9FzyAXKH8GYOj1y7ZpkjsnD-HWEvMfH2ysgzm-s4MMGXWVTgi5NijBY1SJ8pV_gPxb8WyUSHr-B_xwaHTFWC7fAslVsOlIe3iB9rAc717N9PNSupVS79G5wLDYc4zGImlbJsuP4i-vctILgd_IK8RIBfpgTaFeZOpD3ueDVi2p6sAuxQ==&ruid=1f2fc3a7-18c8-4397-bbca-73ffafef7367&subid=646924800784084992&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ot=245 HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Sc: gLEksGxzwzAlWOKlqUFdFTAnvP49hOYbBPEUwjcuubV-mIrR1s_LCX7qwtTcNpJm6snB7lF7DWLkTY-WJHgF3LV8BEc=
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: scm=1; OAID=5ff1faa9a5aa4564afe13951f799179f; oaidts=1675802409
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.242
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 2b914b8dab23fdde425560710a7dd324
access-control-expose-headers: X-Sc
x-sc:
set-cookie: OAID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None oaidts=1675802409; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /11?rnd=3182426496&z=5382937&b=15763363&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=3IcwNEgudkq5pJo17wrbWvRwu7uXRVuAm4Dfola3u9PsTgdi6Li8sOBmluohg7-JalqepZXLBr9hcUo-Z645YCqXsP91xkbGdLt_FnReSmPGYqEmdxH6KVhWvQ5J83-1Eq-d18TeFg2f1VvnA4L6_pLX5J2zxKkPgM_5z5-i2m9eJcuugPA_isLHcyzSJG1p9A5tT-otGxEC8tCDy79ZougPbfBAVOSvCGkssZ-bp_BmQAy8Hex92QaWQJPOJtB0rY7Y4aA4o5okK3iQ4JUO3nD8Olmq5UEg7SxLxI8hdAgCdONby4nUMSWUl_lYUyyqhrMSzHJ4i7T7-p5QmhDwnKjTbGDAqJFfceKpK2gDVZxjxWUO7GkUxc8UcWtEHg7Vqbw55bAUCNkLCRAMX4xfu9KJjldIg_xZaB5fGvs8JLOk4VNkL2ljQGVRzb1kueyFUYU1HKyxpaZ6zA-ClAPfTibjlnw9m6zg0iksOU9FzyAXKH8GYOj1y7ZpkjsnD-HWEvMfH2ysgzm-s4MMGXWVTgi5NijBY1SJ8pV_gPxb8WyUSHr-B_xwaHTFWC7fAslVsOlIe3iB9rAc717N9PNSupVS79G5wLDYc4zGImlbJsuP4i-vctILgd_IK8RIBfpgTaFeZOpD3ueDVi2p6sAuxQ==&ruid=1f2fc3a7-18c8-4397-bbca-73ffafef7367&subid=646924800784084992&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=1&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1 
Host: arsnivyr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Sc: gLEksGxzwzAlWOKlqUFdFTAnvP49hOYbBPEUwjcuubV-mIrR1s_LCX7qwtTcNpJm6snB7lF7DWLkTY-WJHgF3LV8BEc=
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Cookie: scm=1; OAID=5ff1faa9a5aa4564afe13951f799179f; oaidts=1675802409
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.242
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:09 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 3495e9403310f2ecc0302f254ebc5b8b
access-control-expose-headers: X-Sc
x-sc:
set-cookie: OAID=5ff1faa9a5aa4564afe13951f799179f; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None oaidts=1675802409; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None oaidvc=1; expires=Wed, 07 Feb 2024 20:40:09 GMT; secure; SameSite=None CNT=1_v1_o4fwAAEAAADDS1YA; expires=Tue, 07 Feb 2023 21:40:09 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61AB04B189991B1F90004B04C6127B02A4F953645F1B1610953F02D5FF7C4887"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9116
Expires: Tue, 07 Feb 2023 23:12:06 GMT
Date: Tue, 07 Feb 2023 20:40:10 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Next.js
ETag: "tkyu9ib1w3gx7"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (21931), with no line terminators
Size:   5954
Md5:    49263d0004f2e6858752fe9029d7ee7b
Sha1:   aaaf10885f9991f1f16f0beb2bcba902b226dfc4
Sha256: dadddff633c84119fe14e6ef143dd3428f08f156f0ee13ad8da2cea816c3e865
                                        
                                            GET /_next/static/css/684b39f62cded0db.css HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"6c23-1862cc70e46"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (27619), with CRLF line terminators
Size:   6387
Md5:    8f6f8eb3b0994d1acbfa31c204f97cb0
Sha1:   c7f5a98f4889e4ebf3ef7fca1084ebf9c60eab96
Sha256: 31c04ae070593e8623484bbde04e4b844c9d0f96140a00dade6ac4ccf43935a6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_next/static/chunks/webpack-eeb1e4a6befe36e1.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"8f6-1862cc70e52"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (2294), with no line terminators
Size:   1078
Md5:    7cfbabf34c73cf6212b4a24cd18e99ed
Sha1:   75f97eac124cf440762aca188bc7ae55d89b360d
Sha256: ea54e1f54320f35ca88d4b844b40b303defdd4b28dfe7eacf0a48f43887c4a32
                                        
                                            GET /31224abe9de8da03816b59f2882025e3/invoke.js HTTP/1.1 
Host: www.profitabledisplayformat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         173.233.137.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c6cc9bb6c9f235c67045c5b6fc5a6c4c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Size:   9780
Md5:    c74bc9a8de6743fbc9b15ba1646e48ee
Sha1:   e3904c24384ad32db6c4b8b7e32c1b79fc1d029d
Sha256: ab54614f0b064550d68e6c6ce86f5ed0e25b63e76f3724e72220d6e2506f62d3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /_next/static/chunks/510-95033bf0c5e8ae7d.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"5fbb-1862cc70e56"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (24507), with no line terminators
Size:   9085
Md5:    c9afdcc5726812a6e53924c2cc3dd308
Sha1:   8dc7e80ae881c27e629a5964ada697f1d50a21e1
Sha256: 556d4c3ca6ce59f3c07aa84b6a1a89dc7cae412d8e91cd61107bf6d42aadc645
                                        
                                            GET /_next/static/chunks/675-b73f41980c39ec6a.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"25df-1862cc70e56"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (9695), with no line terminators
Size:   4012
Md5:    b3c02e1fad26ce52b2c668a7a4d28cee
Sha1:   569685ce3b8247f5129b1c919c3a053c6ddc5dd9
Sha256: c29babbe1453bd1bc3dc66e5d57024e097bf3826119f6e7347af63503907cfe2
                                        
                                            GET /_next/static/chunks/554-a15bed86500e700e.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"7091-1862cc70e5a"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (28817), with no line terminators
Size:   6430
Md5:    2447a1cd655ee7d6c6e5c70f13c348ec
Sha1:   50ed129edc1a9ceffaf90dad25095adc08a77004
Sha256: 3fa8dd315d8d383c1e0c3bb257055eff554e064298b16a2d6a1e8039181322b9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7346715F724F1A07D695AA407586FF036DAD63D360937AD41CF9EAE4A60263E6"
Last-Modified: Mon, 06 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10173
Expires: Tue, 07 Feb 2023 23:29:43 GMT
Date: Tue, 07 Feb 2023 20:40:10 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_next/static/chunks/framework-4556c45dd113b893.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"22682-1862cc70e52"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   45327
Md5:    828d2085295ecc1a26daac2042176dd3
Sha1:   1321a70d7499f927489b164a3a7ba3d49c5ef066
Sha256: 5347335eb87a340da6f347359ca03c7bfc9e2135448556ac64e17c83c051ba13
                                        
                                            GET /_next/static/chunks/main-9bf4c2cf7c353ef0.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"1ce12-1862cc70e46"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   34957
Md5:    ec75f4a553ad6ba12bd1a09ccb06fe0f
Sha1:   72ea52608d3768bf396189607b7a374a60992a84
Sha256: 9180ad39779c801c05be91b1df046e8712b6325e1404fa691e9053ddfbfcb883
                                        
                                            GET /_next/static/chunks/142-4eeb76513e56b47d.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"2bc9-1862cc70e5a"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (11209), with no line terminators
Size:   4119
Md5:    a6de8a29c8a2d58309f2b9f5636a74d4
Sha1:   f47d921080dc687019f6d7e7ea9468312fc4dd43
Sha256: b32c259c08e464c37a1d8ceb19eebbd748469d1d201e2f23e3b70ca3bcb40ee4
                                        
                                            GET /_next/static/kRFWxnHs1WR7XRjNOd32S/_buildManifest.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"a11-1862cc70e46"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (2577), with no line terminators
Size:   932
Md5:    11509e2178fe1afb781b01740668f5ed
Sha1:   516a457f3aef8bc28afd983e3a0c71ee513f0846
Sha256: f573f3a193732992fdad0632e59354cd4b0be4cb31e22b5e269334491371c341
                                        
                                            GET /_next/static/kRFWxnHs1WR7XRjNOd32S/_ssgManifest.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Content-Length: 77
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"4d-1862cc70e46"
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    b6652df95db52feb4daf4eca35380933
Sha1:   65451d110137761b318c82d9071c042db80c4036
Sha256: 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
                                        
                                            GET /_next/static/chunks/pages/index-589a5b726bd00ac1.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"e1b0-1862cc70e52"
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (57776), with no line terminators
Size:   18155
Md5:    f7e0d9cfa746ffe1b27f45a530aca577
Sha1:   d647653a0819b464abc95b7e12e95b381d04434e
Sha256: 904a70c7a5526c04be45733283bdf74088890b156108ae441529f489bfa5adbc
                                        
                                            GET /wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/webfonts/fa-regular-400.woff2 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://xcigamesdd.com/wp-content/plugins/wpdiscuz/assets/third-party/font-awesome-5.13.0/css/fa.min.css?ver=7.5.1
Cookie: _ga_LTBNRSB0H2=GS1.1.1675802460.1.0.1675802460.0.0.0; _ga=GA1.1.2132799029.1675802460; prefetchAd_5260642=true; dom3ic8zudi28v8lr6fgphwffqoz0j6c=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: font/woff2
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=10368000
expires: Wed, 07 Jun 2023 20:40:10 GMT
last-modified: Thu, 08 Dec 2022 06:42:56 GMT
accept-ranges: bytes
content-length: 13584
date: Tue, 07 Feb 2023 20:40:10 GMT
vary: Accept-Encoding


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13584, version 331.524\012- data
Size:   13584
Md5:    c20b5b7362d8d7bb7eddf94344ace33e
Sha1:   260bb01acd44d88dcb7f501a238ab968f86bef9e
Sha256: 6a8c8e9e1e7f692c21af1956de163f3d026778e6449fe93a09a671847ca1ae65
                                        
                                            GET /wp-content/plugins/wpdiscuz/themes/default/css/fonts/sqr721c-webfont.woff2 HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://xcigamesdd.com/wp-content/plugins/wpdiscuz/themes/default/style.css?ver=7.5.1
Cookie: _ga_LTBNRSB0H2=GS1.1.1675802460.1.0.1675802460.0.0.0; _ga=GA1.1.2132799029.1675802460; prefetchAd_5260642=true; dom3ic8zudi28v8lr6fgphwffqoz0j6c=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: font/woff2
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=10368000
expires: Wed, 07 Jun 2023 20:40:10 GMT
last-modified: Thu, 08 Dec 2022 06:42:53 GMT
accept-ranges: bytes
content-length: 18596
date: Tue, 07 Feb 2023 20:40:10 GMT
vary: Accept-Encoding


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18596, version 1.0\012- data
Size:   18596
Md5:    6281c357f724016771a0b0a021cf4e6e
Sha1:   848b5b5316586483876226b2cb66a897327b1029
Sha256: 14c1fd3f6d83b4d10f23f1d68304ffbcc1399ac0ced69763bd1d8c9691b431a4
                                        
                                            GET /watch.1259286602678.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1 HTTP/1.1 
Host: peeksdragoncontinually.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         173.233.137.60
HTTP/1.1 307 Temporary Redirect
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:10 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Location: https://peeksdragoncontinually.com/watch.1259286602678.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1&shu=966e3fddc8ea2a39f587f533c03ad1d98a52b2306e54f1f40ffac317bcd29f2777ec2c8eee893b5855f0e7e00b4b3a50413f5d200a7bda17bb433182895788081afa96b24a013d70fb12bf3904a4b70d58aff942645703a1dc220ae17df5f6f4&pst=1675802470&rmtc=t
Set-Cookie: u_pl=17596898; expires=Wed, 08 Feb 2023 20:40:10 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.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.33eWdMY0zyAyV59EPD59Sk2-Do4jW2vdJuoOGOdrqGg; expires=Tue, 07 Feb 2023 20:41:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1eb56707306572f0acac06545194f458
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /watch.1259286602678.js?key=e0545ea4e9fad86bbc397bc0cf40db8c&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1&shu=966e3fddc8ea2a39f587f533c03ad1d98a52b2306e54f1f40ffac317bcd29f2777ec2c8eee893b5855f0e7e00b4b3a50413f5d200a7bda17bb433182895788081afa96b24a013d70fb12bf3904a4b70d58aff942645703a1dc220ae17df5f6f4&pst=1675802470&rmtc=t HTTP/1.1 
Host: peeksdragoncontinually.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Referer: http://xcigamesdd.com/
Connection: keep-alive
Cookie: u_pl=17596898; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU5Njg5OCwiayI6ImUwNTQ1ZWE0ZTlmYWQ4NmJiYzM5N2JjMGNmNDBkYjhjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTQ3MjUzLCJwaWQiOjE1ODEwNCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyNywicHQiOjQsInBrIjoidDh0aW5hZngiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL3hjaWdhbWVzZGQuY29tL2ZpbmFsLWZhbnRhc3kteGlpLXRoZS16b2RpYWMtYWdlLyJ9fQ.33eWdMY0zyAyV59EPD59Sk2-Do4jW2vdJuoOGOdrqGg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         173.233.137.60
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=69e1419c-7493-4fc9-95e1-3195f8e43844:2:1; expires=Tue, 14 Feb 2023 20:40:10 GMT; secure; SameSite=None pdhtkv=true; expires=Wed, 08 Feb 2023 20:40:10 GMT; secure; SameSite=None uncs=1; expires=Wed, 08 Feb 2023 20:40:10 GMT; secure; SameSite=None pdhtkv27=true; expires=Wed, 08 Feb 2023 20:40:10 GMT; secure; SameSite=None uncs27=1; expires=Wed, 08 Feb 2023 20:40:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 70b613e071fca24c08b82c7b783853f1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2454)
Size:   1988
Md5:    fba587c8bc650c5c3aac762419d88285
Sha1:   a62ead7e9f2a834c9514cb20213006e53cd94ac4
Sha256: 5f5876ac7359fe33f6813c0913b46967ad169d0745a098ddb488754398ed15cc

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /api/authUser HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nbfcs.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
ETag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /_next/static/chunks/pages/_app-5a5c4413a32c48e1.js HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Tue, 07 Feb 2023 16:48:08 GMT
ETag: W/"59123-1862cc70e4a"
Vary: Accept-Encoding
Content-Encoding: gzip

                                        
                                            GET /css2?family=Montserrat:wght@400;500;600;700&family=Raleway:wght@400;500;600;700;800&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Feb 2023 20:40:10 GMT
date: Tue, 07 Feb 2023 20:40:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20862
Md5:    2c3ca8b2d86f4d46dc868cb037ae336c
Sha1:   5cb3bc1ca46e9c4fd61f16e5c86b7f07efdacd1b
Sha256: 78c847390576a14561e6b7263d0d57fd07a588735b862069362876538d748f0a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C2F74CE5621225AE2D8CD9866001E2D143D35BC51054CA5F916936964F9992AF"
Last-Modified: Mon, 06 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17940
Expires: Wed, 08 Feb 2023 01:39:11 GMT
Date: Tue, 07 Feb 2023 20:40:11 GMT
Connection: keep-alive

                                        
                                            GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fform.e5986808.png&w=640&q=75 HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:11 GMT
Content-Length: 8854
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: PKZNWLNi8G+YLCuvpHhHjKNnEzdbL8RUI5T8xBPkDzU=
Content-Disposition: inline; filename="form.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   8854
Md5:    18293f3c0452895c1c3a222f65f87bc1
Sha1:   518b919779481eab098c975a0e1d327d13e18077
Sha256: 3ca64d58b362f06f982c2bafa478478ca36713375b2fc4542394fcc413e40f35
                                        
                                            GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FhandPhone.d82b3fd5.png&w=1200&q=75 HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:11 GMT
Content-Length: 40358
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: 6tHqL3RVmby6AiCwgY7mFH4g2dUHWcdu3xEvOl0bmkg=
Content-Disposition: inline; filename="handPhone.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   40358
Md5:    e24657bc88acc8111b1443af4d752a13
Sha1:   282f580ad16532d884b6c0907d111f7adc2c0b14
Sha256: ead1ea2f745599bcba0220b0818ee6147e20d9d50759c76edf112f3a5d1b9a48
                                        
                                            GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fworld.c12e01af.png&w=1200&q=75 HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:11 GMT
Content-Length: 37200
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: mbhykP3UoGkusjo4DrLHxOQMo-xfXncCvbQekBi1a3Q=
Content-Disposition: inline; filename="world.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   37200
Md5:    76341a391d7dab85dd7d219410e9718b
Sha1:   5e4be2c4616b9893339a0e19d1e1765e34fcc8c4
Sha256: 99b87290fdd4a0692eb23a380eb2c7c4e40ca3fc5f5e7702bdb41e9018b56b74
                                        
                                            GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fus.2cafd197.png&w=750&q=75 HTTP/1.1 
Host: www.nbfcs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         23.254.229.241
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Server: nginx
Date: Tue, 07 Feb 2023 20:40:11 GMT
Content-Length: 32380
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: 30mw642o+8GsC21+R3PmKZ2OJC3TsYEBurCSZhzYcKo=
Content-Disposition: inline; filename="us.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 746x478, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   32380
Md5:    975d5adf70ce77384e3238bf72f00e96
Sha1:   0e188e26a0bb4ca0b5d2748ce0704d9b2e814714
Sha256: df49b0eb8da8fbc1ac0b6d7e4773e6299d8e242dd3b18101bab092661cd870aa
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /matomo.js HTTP/1.1 
Host: analytics.linkmoe.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         50.31.177.118
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 14 Feb 2023 20:40:10 GMT
last-modified: Fri, 03 Feb 2023 21:10:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 21519
date: Tue, 07 Feb 2023 20:40:10 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1601)
Size:   21519
Md5:    48e67f21b901e3584c7a34f1a2f96894
Sha1:   00fa75a956ddcfff2690c27f62d3ede53e88a745
Sha256: d76669dac74f5ba885b6f95aafc76395a923f7eb2e303ff49dc1ca305fa89737
                                        
                                            GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nbfcs.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 03:37:24 GMT
expires: Thu, 01 Feb 2024 03:37:24 GMT
cache-control: public, max-age=31536000
age: 579767
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Size:   46524
Md5:    c1fd378f54921c75e4ae1821e7b8fff6
Sha1:   2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
Sha256: 405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 07 Feb 2023 20:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /koko-analytics-collect.php?p=6327&nv=1&up=1&r=&rqp=0.at097tsyugv HTTP/1.1 
Host: xcigamesdd.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://xcigamesdd.com/final-fantasy-xii-the-zodiac-age/
Cookie: _ga_LTBNRSB0H2=GS1.1.1675802460.1.0.1675802460.0.0.0; _ga=GA1.2.2132799029.1675802460; prefetchAd_5260642=true; dom3ic8zudi28v8lr6fgphwffqoz0j6c=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1; _gid=GA1.2.727939016.1675802462; _gat_gtag_UA_12043064_122=1; _pk_id.3.5f59=764f289032577556.1675802463.; _pk_ses.3.5f59=1

search
                                         107.6.168.100
HTTP/1.1 200 OK
content-type: image/gif
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
tk: N
content-length: 43
date: Tue, 07 Feb 2023 20:40:11 GMT
vary: Accept-Encoding


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch.1600256854347.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1 HTTP/1.1 
Host: outdilateinterrupt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         192.243.59.12
HTTP/1.1 307 Temporary Redirect
Content-Type: text/html
                                        
Server: nginx/1.17.6
Date: Tue, 07 Feb 2023 20:40:11 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Location: https://outdilateinterrupt.com/watch.1600256854347.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1&shu=d9174e637cba2ba89b78b6a6c94a2f9d57d8eec921baca93f208fc2400d3d2274939a126c9bd7d73bad1c8bd9030ae95201affb73c5e8cc3351ceed24504d81dd72f4d4b075a0416217867ceb4a35cffea621068&pst=1675802471&rmtc=t
Set-Cookie: u_pl=17632612; expires=Wed, 08 Feb 2023 20:40:11 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzYzMjYxMiwiayI6IjMxMjI0YWJlOWRlOGRhMDM4MTZiNTlmMjg4MjAyNWUzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTQ3MjUzLCJwaWQiOjE1ODEwNCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjozMiwicHQiOjQsInBrIjoieTExNXQwMTN3IiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHA6Ly94Y2lnYW1lc2RkLmNvbS9maW5hbC1mYW50YXN5LXhpaS10aGUtem9kaWFjLWFnZS8ifX0.0jlsl6g2gDknKEq50dzahkyhbHYjqHVUcN8mHgRm47A; expires=Tue, 07 Feb 2023 20:41:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e1f8cd5169d211eaa0e3d92e123ddf1e
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E25753484FF7DAA3FE858DCF3173286FE242AFD6FD13732F8FC38B7B7940A7CA"
Last-Modified: Sun, 05 Feb 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12489
Expires: Wed, 08 Feb 2023 00:08:20 GMT
Date: Tue, 07 Feb 2023 20:40:11 GMT
Connection: keep-alive

                                        
                                            POST /matomo.php?action_name=Final%20Fantasy%20XII%3A%20The%20Zodiac%20Age%20XCI%20NSP%20NSZ%20Download%20%7C%20SwitchXCI&idsite=3&rec=1&r=809258&h=20&m=41&s=2&url=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&_id=764f289032577556&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=muFTpn&pf_net=36&pf_srv=1061&pf_tfr=70&pf_dm1=2010&uadata=%7B%7D HTTP/1.1 
Host: analytics.linkmoe.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/

search
                                         50.31.177.118
HTTP/1.1 204 No Content
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
date: Tue, 07 Feb 2023 20:40:10 GMT

                                        
                                            GET /cti/d3/92/14/d39214d9ce22b91f42ca0c079367d213/1627917082.png HTTP/1.1 
Host: cdn.cloudimagesb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.133.44.10
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 07 Feb 2023 20:40:11 GMT
content-length: 33594
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 15:11:31 GMT
etag: "61080b23-833a"
expires: Thu, 09 Feb 2023 20:40:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced\012- data
Size:   33594
Md5:    8d010b6c281ac44b529ab59df03d8977
Sha1:   84d440a69ed93508d16e3de05b1a73532b22411a
Sha256: 50f87323468e422ee83e428cccdeb09593b803a53eaccc05c04c0b26d591e303
                                        
                                            GET /watch.1600256854347.js?key=31224abe9de8da03816b59f2882025e3&kw=%5B%22final%22%2C%22fantasy%22%2C%22xii%22%2C%22the%22%2C%22zodiac%22%2C%22age%22%2C%22xci%22%2C%22nsp%22%2C%22nsz%22%2C%22download%22%2C%22switchxci%22%5D&refer=http%3A%2F%2Fxcigamesdd.com%2Ffinal-fantasy-xii-the-zodiac-age%2F&tz=0&dev=e&res=12.1053&uuid=69e1419c-7493-4fc9-95e1-3195f8e43844%3A2%3A1&shu=d9174e637cba2ba89b78b6a6c94a2f9d57d8eec921baca93f208fc2400d3d2274939a126c9bd7d73bad1c8bd9030ae95201affb73c5e8cc3351ceed24504d81dd72f4d4b075a0416217867ceb4a35cffea621068&pst=1675802471&rmtc=t HTTP/1.1 
Host: outdilateinterrupt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://xcigamesdd.com
Referer: http://xcigamesdd.com/
Connection: keep-alive
Cookie: u_pl=17632612; ain=eyJhbGciOiJIUzI1NiJ9.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.0jlsl6g2gDknKEq50dzahkyhbHYjqHVUcN8mHgRm47A
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         192.243.59.12
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.17.6
Date: Tue, 07 Feb 2023 20:40:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://xcigamesdd.com
Access-Control-Allow-Origin: http://xcigamesdd.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=69e1419c-7493-4fc9-95e1-3195f8e43844:2:1; expires=Tue, 14 Feb 2023 20:40:11 GMT; secure; SameSite=None iprc52d95e59691926180c45c656e4d761e7=2717341; expires=Wed, 08 Feb 2023 22:40:11 GMT; secure; SameSite=None pdhtkv=true; expires=Wed, 08 Feb 2023 20:40:11 GMT; secure; SameSite=None uncs=1; expires=Wed, 08 Feb 2023 20:40:11 GMT; secure; SameSite=None pdhtkv32=true; expires=Wed, 08 Feb 2023 20:40:11 GMT; secure; SameSite=None uncs32=1; expires=Wed, 08 Feb 2023 20:40:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2652c0863761d0e77576e33506aaf8e2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (581)
Size:   635
Md5:    bfb6647d80066a3353f7e942e835c101
Sha1:   f9e998daaae7762c3789a3299bb1e321bac48eaf
Sha256: 05537238470d2e11c48185dcd25bdcb55072cd5b9c6e31cd0692faa476701fcb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E1ACBDFC39FCB80B03E62AE950B53FBBB65B973CBFEFD4F355D280DAC8E2CF37"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10130
Expires: Tue, 07 Feb 2023 23:29:01 GMT
Date: Tue, 07 Feb 2023 20:40:11 GMT
Connection: keep-alive

                                        
                                            GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17632612 HTTP/1.1 
Host: jennyvisits.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://xcigamesdd.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         173.233.139.164
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Wed, 08 Feb 2023 20:40:12 GMT ain=eyJhbGciOiJIUzI1NiJ9.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.o5-7EqQbtbfArEWiwoD41hTfmP6wrlse-Ie7bq2_Yyw; expires=Tue, 07 Feb 2023 20:41:12 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5ce278883f0ef5c05c23bbf06cfc55be
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   1261
Md5:    bcdf30bd98cbce96cb8226ba7e00600d
Sha1:   99aff3c2fb6da8beaaa3159f7a5e88bf8785dc4b
Sha256: 2fad7a9d5ae21fabe61fec6d72079ca37c45f39092be723651ea32b4f5801704
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "88F0DF384A7627942B471E7C75AF2D63ACB07EA358489DD8271D24571AADFDD5"
Last-Modified: Tue, 07 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7700
Expires: Tue, 07 Feb 2023 22:48:32 GMT
Date: Tue, 07 Feb 2023 20:40:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "88F0DF384A7627942B471E7C75AF2D63ACB07EA358489DD8271D24571AADFDD5"
Last-Modified: Tue, 07 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7700
Expires: Tue, 07 Feb 2023 22:48:32 GMT
Date: Tue, 07 Feb 2023 20:40:12 GMT
Connection: keep-alive

                                        
                                            OPTIONS /bucket HTTP/1.1 
Host: e2ertt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://xcigamesdd.com/
Origin: http://xcigamesdd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.233
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:12 GMT
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

                                        
                                            POST /bucket HTTP/1.1 
Host: e2ertt.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/json
Content-Length: 545
Origin: http://xcigamesdd.com
Connection: keep-alive
Referer: http://xcigamesdd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.233
HTTP/2 200 OK
                                        
server: nginx
date: Tue, 07 Feb 2023 20:40:12 GMT
content-length: 0
access-control-allow-origin: http://xcigamesdd.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

                                        
                                            GET /dyfc1k09?shu=51b67af388f987827de021aa1f61e7c82becdc3ccb08672bc2900f25c89e09d1da7fa63d9fee0c7656f746901c5f26daec35460ed3696543313bb389d66ead6f45d4f8f2f9151b875029487e42115472708e469ba7ebbb5bb93e02acb98777&pst=1675802472&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=http%3A%2F%2Fxcigamesdd.com%2F&psid=17632612 HTTP/1.1 
Host: jennyvisits.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jennyvisits.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjEyMjY2MCwiayI6Ijg2MzcwNWJjYmI0YjZhNTU0ZGRiMzU5NjY1Mzk1YTZmIiwic2lkIjoiMTc2MzI2MTIiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjE0NjQxNSwicGlkIjo5NzI5OSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJkeWZjMWswOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL3hjaWdhbWVzZGQuY29tLyJ9fQ.o5-7EqQbtbfArEWiwoD41hTfmP6wrlse-Ie7bq2_Yyw; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         173.233.139.164
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Server: nginx/1.19.5
Date: Tue, 07 Feb 2023 20:40:12 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://xml-v4.trafficmoose.com/click?seat=1705924&i=THR6691iy4A_0
Set-Cookie: pdhtkv=true; expires=Wed, 08 Feb 2023 20:40:12 GMT uncs=1; expires=Wed, 08 Feb 2023 20:40:12 GMT pdhtkv28=true; expires=Wed, 08 Feb 2023 20:40:12 GMT uncs28=1; expires=Wed, 08 Feb 2023 20:40:12 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e5061b3a98611c5eee90fc32450bde96
Strict-Transport-Security: max-age=0; includeSubdomains

                                        
                                            GET /click?seat=1705924&i=THR6691iy4A_0 HTTP/1.1 
Host: xml-v4.trafficmoose.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         198.134.116.17
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=d_114896.16122660
Pragma: no-cache

                                        
                                            GET /redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=d_114896.16122660 HTTP/1.1 
Host: adserving.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         95.101.10.153
HTTP/2 307 Temporary Redirect
content-type: text/html
                                        
content-length: 0
location: https://www.unibet.nu/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&sref=TRM&TRM=d_114896.16122660&affiliateId=1&pid=68248853&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Tue, 07 Feb 2023 20:40:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 07 Feb 2023 20:40:12 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68248853%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675802412966)%5c%2f%22%2c%22CookieTag%22%3a%223795068248853451240919C2023272040%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228795063562%7c1%22%7d%5d; domain=.unibet.com; expires=Thu, 07-Feb-3022 20:40:12 GMT; path=/; secure; SameSite=Strict
server-timing: edge; dur=1, origin; dur=56, cdn-cache; desc=MISS
X-Firefox-Spdy: h2

                                        
                                            GET /stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&sref=TRM&TRM=d_114896.16122660&affiliateId=1&pid=68248853&bid=37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         85.184.96.0
HTTP/2 301 Moved Permanently
                                        
date: Tue, 07 Feb 2023 20:40:13 GMT
content-length: 0
location: https://www.unibet.nu:443/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&sref=TRM&TRM=d_114896.16122660&affiliateId=1&pid=68248853&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A68248853-37950
set-cookie: JSESSIONID=node0isrbsrx0j36pikx1yi0mgpw3340401.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict __ucbt=node0isrbsrx0j36pikx1yi0mgpw33; Path=/; Domain=.unibet.nu; Expires=Thu, 06-Feb-2025 20:40:13 GMT; Max-Age=63072000; Secure; SameSite=None uniattr=ST.0.T; Path=/; Domain=.unibet.nu; Expires=Thu, 06-Feb-2025 20:40:13 GMT; Max-Age=63072000; Secure; SameSite=None uniattr_ref=; Path=/; Domain=.unibet.nu; Expires=Thu, 06-Feb-2025 20:40:13 GMT; Max-Age=63072000; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None netwid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None CLAIM_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affiliateId=1; Path=/; Domain=.unibet.nu; Secure; SameSite=None B-TAG=320665405_EDDA2DEE047E4C4499F811ED46EB297C; Path=/; Domain=.unibet.nu; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BID=37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None PID=68248853; Path=/; Domain=.unibet.nu; Secure; SameSite=None CHID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REFERER=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BOCAID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None PRODUCT_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_EDDA2DEE047E4C4499F811ED46EB297C%26sref%3DTRM%26TRM%3Dd_114896.16122660%26affiliateId%3D1%26pid%3D68248853%26bid%3D37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None clientId=polopoly_desktop; Domain=www.unibet.nu; Path=/; SameSite=None; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Tue, 07 Feb 2023 20:40:13 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            GET /stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&sref=TRM&TRM=d_114896.16122660&affiliateId=1&pid=68248853&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A68248853-37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ucbt=node0isrbsrx0j36pikx1yi0mgpw33; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=320665405_EDDA2DEE047E4C4499F811ED46EB297C; BID=37950; PID=68248853; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_EDDA2DEE047E4C4499F811ED46EB297C%26sref%3DTRM%26TRM%3Dd_114896.16122660%26affiliateId%3D1%26pid%3D68248853%26bid%3D37950; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         85.184.96.0
HTTP/2 301 Moved Permanently
                                        
date: Tue, 07 Feb 2023 20:40:13 GMT
content-length: 0
location: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:68248853-37950&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&bid=37950&campaignId=2799402&pid=68248853
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Tue, 07 Feb 2023 20:40:13 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EBB714E1C4553A432D0CB2BCD60D6AE5174EB0A6B553D66CF56077C37C2FBBF0"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2298
Expires: Tue, 07 Feb 2023 21:18:31 GMT
Date: Tue, 07 Feb 2023 20:40:13 GMT
Connection: keep-alive

                                        
                                            GET /nu/pop/sportsbook/multisports/1-styles.css HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:68248853-37950&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&bid=37950&campaignId=2799402&pid=68248853
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68248853%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675802412966)%5c%2f%22%2c%22CookieTag%22%3a%223795068248853451240919C2023272040%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228795063562%7c1%22%7d%5d; btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.25.188
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Tue, 07 Feb 2023 20:40:13 GMT
cache-control: public, max-age=900, immutable
content-md5: zXkBqwBMviPPaK5rBIapmA==
last-modified: Thu, 26 Jan 2023 12:30:17 GMT
etag: W/"0x8DAFF9914DE94BB"
x-ms-request-id: 580bcb77-701e-0034-8081-3121ca000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 461381
vary: Accept-Encoding
server: cloudflare
cf-ray: 795ef07b8c23b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5741
Md5:    c6c55362087107502cd01654835de3de
Sha1:   ea1f9c334d62598ff610e2025a504b045d42c5c4
Sha256: 846c1f22df5f8d3919f00b7db830e2bff86e87da832d056a5ff85958525dcb2b
                                        
                                            GET /custom.js HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:68248853-37950&btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C&bid=37950&campaignId=2799402&pid=68248853
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68248853%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675802412966)%5c%2f%22%2c%22CookieTag%22%3a%223795068248853451240919C2023272040%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228795063562%7c1%22%7d%5d; btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.25.188
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 07 Feb 2023 20:40:13 GMT
content-md5: e/Aekt1V1fopj1X7y5r9MA==
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
etag: W/"0x8DA115DA300B0C1"
x-ms-request-id: d013a120-f01e-003a-7703-03087a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 130056
vary: Accept-Encoding
server: cloudflare
cf-ray: 795ef07b9c34b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2526
Md5:    eac44f3b04fee72e241d2c4a1ccb314c
Sha1:   c3e1ba9146a6fc90296cd2b39d4b85634add5dc5
Sha256: 0458b28b3c92e2022aed71565945a9c0ab028b3c26d43b1af6b98babfa84f7e8
                                        
                                            GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1 
Host: a1s-cdn.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68248853%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1675802412966)%5c%2f%22%2c%22CookieTag%22%3a%223795068248853451240919C2023272040%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228795063562%7c1%22%7d%5d; btag=320665405_EDDA2DEE047E4C4499F811ED46EB297C
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search