r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8755
Expires: Thu, 09 Feb 2023 08:33:09 GMT
Date: Thu, 09 Feb 2023 06:07:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3500
Expires: Thu, 09 Feb 2023 07:05:34 GMT
Date: Thu, 09 Feb 2023 06:07:14 GMT
Connection: keep-alive
ujn.nowsubmission.com/o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4
301 Moved Permanently 0 B URL HTTP/1.1 ujn.nowsubmission.com/o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4
IP
ASN #61317 Ipxo Uk Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4 HTTP/1.1
Host: ujn.nowsubmission.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://ujn.nowsubmission.com/o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 05:34:15 GMT
content-type: application/json
age: 1979
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5172
Expires: Thu, 09 Feb 2023 07:33:27 GMT
Date: Thu, 09 Feb 2023 06:07:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VZhMC85di197mzSO45H1u43urGNzcjjgHhZJJFQ/jMHi9Jk4iLvMzIA8JGCKtuco+7LNVum32rs=
x-amz-request-id: MF74ZJ0A9JPPE50W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 05:36:14 GMT
age: 1861
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 06:07:15 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb149b87d14be419f78458891d4154c4
682b002cfeba08617ede1b8e0e967ccf758cc4a3
e7991c456f7ee54a55efab81f902c36026b320a34086ad1b41a3594cd3dd914e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E7991C456F7EE54A55EFAB81F902C36026B320A34086AD1B41A3594CD3DD914E"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6929
Expires: Thu, 09 Feb 2023 08:02:44 GMT
Date: Thu, 09 Feb 2023 06:07:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 05:14:53 GMT
age: 3142
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ujn.nowsubmission.com/o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4
302 Found 842 B URL HTTP/1.1 ujn.nowsubmission.com/o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4
IP
ASN #61317 Ipxo Uk Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (337)
Hash 792b4e9dece5e3f3f514234d955739cb
5d9d4e2a148ba459eb6b8d6175d693af68a4b36d
a15aa669353d9501ecfda4587308c609bdf7b8f60a754563fa48fb473df4d2f8
Analyzer Verdict Alert fortinet Phishing
GET /o/CU39BXO9/f567cb00-a83f-11ed-8d6d-d5a6e542e48d/f56c6854-a83f-11ed-8946-c961d113eac4 HTTP/1.1
Host: ujn.nowsubmission.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
date: Thu, 09 Feb 2023 06:07:15 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
cache-control: no-cache, private
location: https://mail.hodtd.com/aff_c?offer_id=11481&aff_id=1721&url_id=17896&aff_sub=97835&aff_sub2=00445566-a840-11ed-86d0-b7745f80473e&
x-redir: true
set-cookie: yredir_session=eyJpdiI6IlBTYmV6VU9SaytZTXpZekQ1NHdrN1E9PSIsInZhbHVlIjoiWXhuK0lrVnJkYzM5STJTZnE5NW5DYVRPbUxXNWUxRnQyNDV3RXczME1hQzJBU1hMVGh0TXR1NG5SL1FCUkNCOG8xaGFWRkZiQ0dENlplMHptL3F3Si9FU2RYRUZXMlRFd3hFanFZMldvNWRKc0Mrbms2RkpLU3BWSUtCbHpMQ2MiLCJtYWMiOiI0NmU5YTg3MzYzZTc3NjRjZDEwODliOGNiMjFlMmU2ZDM3OTViYmFiMTQyMjBhY2IyYTM2YWVlNzhiMGQ1NDZlIiwidGFnIjoiIn0%3D; expires=Thu, 09 Feb 2023 08:07:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax
strict-transport-security: max-age=15768000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3421
Expires: Thu, 09 Feb 2023 07:04:16 GMT
Date: Thu, 09 Feb 2023 06:07:15 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f30d64a304670cc2e5214c855ff89ac7
54590009cde4cad63556449a772ba105e52bec2f
08c053dd9365ae2ea63bd08058154abda797a36bc37fbc3a66b8a7767c0e5332
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 09 Feb 2023 06:07:15 GMT
Last-Modified: Thu, 09 Feb 2023 05:34:44 GMT
Server: ECS (dcb/7ECB)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6vyJkpPxAfOIJemFf01mBxrHOhdzCUk-TqMbqqNCP12VeDkfDcKgSQ==
Age: 1951
mail.hodtd.com/aff_c?offer_id=11481&aff_id=1721&url_id=17896&aff_sub=97835&aff_sub2=00445566-a840-11ed-86d0-b7745f80473e&
302 Found 525 B URL HTTP/1.1 mail.hodtd.com/aff_c?offer_id=11481&aff_id=1721&url_id=17896&aff_sub=97835&aff_sub2=00445566-a840-11ed-86d0-b7745f80473e&
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (391)
Hash 135841737cd4804697739251e0b5717d
ba8fec729ce02ab0bf47e5e64005cf64a9322721
6347465ae9efb934ab6df88dd0dcce002e0a120381f177ac0146fa30d9691d11
GET /aff_c?offer_id=11481&aff_id=1721&url_id=17896&aff_sub=97835&aff_sub2=00445566-a840-11ed-86d0-b7745f80473e& HTTP/1.1
Host: mail.hodtd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 09 Feb 2023 06:07:15 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 525
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: /aff_r?offer_id=11481&aff_id=1721&url=https%3A%2F%2Fwww.hkselect-61.com%2Fcgi-bin%2Fwingame.pl%3Fpartner_pk%3D111%26wingame_pk%3D45%26freetest_pk%3D31%26wingame_special_prize1%3Dpregame_prize_prize_name_814_1526973948%26sub_id%3D1721-97835%26sub_id_postback%3D1026373954b898b1ea18dbaf41c84b&urlauth=591156618232812402053635891073
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: aff_ran_url_11481=17896; expires=Fri, 10 Feb 2023 06:07:15 GMT; path=/; SameSite=None; Secure
enc_aff_session_11481=ENC031261136070e8826f975382e33df4b983493f337f7d784b7a3beb794056ca9f1dff91cf8bca37c0006631c841b74e96ce35b6d365beeb79b7956c95e6090f00e92d16cf5da21a034fa0fbd2a684b678a4ab5017c4ccfe6070d72fc49d64d96bdd11a99ec75705aeecd8c7807ebbb1504628bb914ab3e39d425028003dca09cdf3d68e71e031efb55fd213afea11b3de18dacbcea87c279e573d310d15f913e5b3222d14bb; expires=Thu, 09 Mar 2023 06:07:15 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Sat, 03 Jan 2026 16:47:15 GMT; path=/; SameSite=None; Secure
Tracking_id: 1026373954b898b1ea18dbaf41c84b
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 546730079d977460cb156caf49f66bc7
Access-Control-Allow-Headers: Tune-SDK-Version
mail.hodtd.com/aff_r?offer_id=11481&aff_id=1721&url=https%3A%2F%2Fwww.hkselect-61.com%2Fcgi-bin%2Fwingame.pl%3Fpartner_pk%3D111%26wingame_pk%3D45%26freetest_pk%3D31%26wingame_special_prize1%3Dpregame_prize_prize_name_814_1526973948%26sub_id%3D1721-97835%26sub_id_postback%3D1026373954b898b1ea18dbaf41c84b&urlauth=591156618232812402053635891073
302 Found 422 B URL HTTP/1.1 mail.hodtd.com/aff_r?offer_id=11481&aff_id=1721&url=https%3A%2F%2Fwww.hkselect-61.com%2Fcgi-bin%2Fwingame.pl%3Fpartner_pk%3D111%26wingame_pk%3D45%26freetest_pk%3D31%26wingame_special_prize1%3Dpregame_prize_prize_name_814_1526973948%26sub_id%3D1721-97835%26sub_id_postback%3D1026373954b898b1ea18dbaf41c84b&urlauth=591156618232812402053635891073
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f0bd7e1f02efcb534c224f6ddd457e9
0a998279f05f479f41ac692c9b5b23e03fccdd24
015f21e8cb6fc4328bd85721b8613817b29999e7de7b7f3fd129555264af2d4f
GET /aff_r?offer_id=11481&aff_id=1721&url=https%3A%2F%2Fwww.hkselect-61.com%2Fcgi-bin%2Fwingame.pl%3Fpartner_pk%3D111%26wingame_pk%3D45%26freetest_pk%3D31%26wingame_special_prize1%3Dpregame_prize_prize_name_814_1526973948%26sub_id%3D1721-97835%26sub_id_postback%3D1026373954b898b1ea18dbaf41c84b&urlauth=591156618232812402053635891073 HTTP/1.1
Host: mail.hodtd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff_ran_url_11481=17896; enc_aff_session_11481=ENC031261136070e8826f975382e33df4b983493f337f7d784b7a3beb794056ca9f1dff91cf8bca37c0006631c841b74e96ce35b6d365beeb79b7956c95e6090f00e92d16cf5da21a034fa0fbd2a684b678a4ab5017c4ccfe6070d72fc49d64d96bdd11a99ec75705aeecd8c7807ebbb1504628bb914ab3e39d425028003dca09cdf3d68e71e031efb55fd213afea11b3de18dacbcea87c279e573d310d15f913e5b3222d14bb; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 09 Feb 2023 06:07:15 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 422
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Pragma: no-cache
Access-Control-Allow-Origin: *
X-Request-Id: b90e7afaee52e1f1516ffe0ab88aba7b
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1122b6e9bc6220ce15e87be47908d8b1
53a792643af6ef01d61b7f77da959bcc0f801e2b
db897991b08e307a15ad1d02f77db26c53eb05e228e4eedd48630b00b511a00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB897991B08E307A15AD1D02F77DB26C53EB05E228E4EEDD48630B00B511A00B"
Last-Modified: Tue, 07 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18672
Expires: Thu, 09 Feb 2023 11:18:27 GMT
Date: Thu, 09 Feb 2023 06:07:15 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TP6ywd/QL/fAbmXv2RPP1w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HLDQoRnYUdJpH+g4r10318Xy+z0=
www.hkselect-61.com/files/web/freetest/_images/image_31_324_1519785649.png
200 OK 68 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_324_1519785649.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash a6f320d9c840c938dffb785dcc2bc663
6be173b1ea8444a4c0ec951445699bfa7cc75289
eba7a7a39459c37cc784afeb2ef1613d0b046b4e1988984fd2f801b568cb7a08
GET /files/web/freetest/_images/image_31_324_1519785649.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/png
content-length: 68
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=926, status=webp_bigger
etag: "5a9616b1-39e"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Wed, 28 Feb 2018 02:40:49 GMT
strict-transport-security: max-age=31536000
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c7fffe8b4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_326_1519785649.png
200 OK 68 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_326_1519785649.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash a6f320d9c840c938dffb785dcc2bc663
6be173b1ea8444a4c0ec951445699bfa7cc75289
eba7a7a39459c37cc784afeb2ef1613d0b046b4e1988984fd2f801b568cb7a08
GET /files/web/freetest/_images/image_31_326_1519785649.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/png
content-length: 68
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=926, status=webp_bigger
etag: "5a9616b1-39e"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Wed, 28 Feb 2018 02:40:49 GMT
strict-transport-security: max-age=31536000
x-map-context: hk
x-served-by: a-04
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c7fffefb4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_207_1519785649.png
200 OK 68 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_207_1519785649.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash a6f320d9c840c938dffb785dcc2bc663
6be173b1ea8444a4c0ec951445699bfa7cc75289
eba7a7a39459c37cc784afeb2ef1613d0b046b4e1988984fd2f801b568cb7a08
GET /files/web/freetest/_images/image_31_207_1519785649.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/png
content-length: 68
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=926, status=webp_bigger
etag: "5a9616b1-39e"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Wed, 28 Feb 2018 02:40:49 GMT
strict-transport-security: max-age=31536000
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c7fffebb4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_238_1615513674.png
200 OK 91 kB URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_238_1615513674.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 278067dd7a7289cf15ec73161659483e
f57a8d7b94797bb9cd9ce13955d7d4c964159758
9afab0f073f2d613351ed36ccb2d00c83bcad8c0a1c1556df9c0b67947530f05
GET /files/web/freetest/_images/image_31_238_1615513674.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 91096
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=98040
content-disposition: inline; filename="image_31_238_1615513674.webp"
etag: "604ac84a-17ef8"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 12 Mar 2021 01:47:54 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c7ffff7b4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_242_1615513675.png
200 OK 90 kB URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_242_1615513675.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 603bc779e58345b9dbd91bc52ad26d27
9ef5cd2228035fa1e1ea98e178ef22f5ee0c914a
6f43d17b879c74ac38b59844a49103d4fd5bdbbf6d901688d7d6c26e6306e207
GET /files/web/freetest/_images/image_31_242_1615513675.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 90458
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=97130
content-disposition: inline; filename="image_31_242_1615513675.webp"
etag: "604ac84b-17b6a"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 12 Mar 2021 01:47:55 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-02
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c7ffffab4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_239_1507775289.png
200 OK 125 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_239_1507775289.png
IP
File type PNG image data, 450 x 555, 1-bit grayscale, non-interlaced\012- data
Hash ce6190e8e17fe7a28ce27e972b586b9b
d61ca545b45296831a19344c369ed0bbcb4346f2
24a7c2bf79e15f2ef408b5ba6f12f785249f39724f865269d4d6b70d7dc7de08
GET /files/web/freetest/_images/image_31_239_1507775289.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 125
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1048
content-disposition: inline; filename="image_31_239_1507775289.webp"
etag: "59ded339-418"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 12 Oct 2017 02:28:09 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c7ffff8b4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_244_1507775295.png
200 OK 125 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_244_1507775295.png
IP
File type PNG image data, 450 x 555, 1-bit grayscale, non-interlaced\012- data
Hash ce6190e8e17fe7a28ce27e972b586b9b
d61ca545b45296831a19344c369ed0bbcb4346f2
24a7c2bf79e15f2ef408b5ba6f12f785249f39724f865269d4d6b70d7dc7de08
GET /files/web/freetest/_images/image_31_244_1507775295.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 125
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1048
content-disposition: inline; filename="image_31_244_1507775295.webp"
etag: "59ded33f-418"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 12 Oct 2017 02:28:15 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c7fffffb4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_243_1615513675.png
200 OK 92 kB URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_243_1615513675.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9e5a7f4a1fa6ba7a20d80ba1424903f1
58d346befa9a634dafdc1f4f779c47c25d77cf29
5e393d50c8eab678330500c73a2601c797b81712209856d2eb16f4e19e636ebd
GET /files/web/freetest/_images/image_31_243_1615513675.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 92196
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=98890
content-disposition: inline; filename="image_31_243_1615513675.webp"
etag: "604ac84b-1824a"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 12 Mar 2021 01:47:55 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c7ff801b4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/files/web/freetest/_images/image_31_245_1507775299.png
200 OK 125 B URL HTTP/2 www.hkselect-61.com/files/web/freetest/_images/image_31_245_1507775299.png
IP
File type PNG image data, 450 x 555, 1-bit grayscale, non-interlaced\012- data
Hash ce6190e8e17fe7a28ce27e972b586b9b
d61ca545b45296831a19344c369ed0bbcb4346f2
24a7c2bf79e15f2ef408b5ba6f12f785249f39724f865269d4d6b70d7dc7de08
GET /files/web/freetest/_images/image_31_245_1507775299.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/webp
content-length: 125
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1048
content-disposition: inline; filename="image_31_245_1507775299.webp"
etag: "59ded343-418"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 12 Oct 2017 02:28:19 GMT
strict-transport-security: max-age=31536000
vary: Accept
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
server: cloudflare
cf-ray: 796a6c800804b4eb-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=recaptchaCallBack&render=6Ld-jL0UAAAAANlyPp6pI1o9u3vFsTyUh0J5L9nS
200 OK 607 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=recaptchaCallBack&render=6Ld-jL0UAAAAANlyPp6pI1o9u3vFsTyUh0J5L9nS
IP
File type ASCII text, with very long lines (944), with no line terminators
Hash e0e153b40ddc8c1e513929c1c9dcb729
73df8815fa400099eee494f405d9f0248f1c1fe7
40421ef38d54983aeb980406032e4fa34066034b1edd629474e15ea65d3dab56
GET /recaptcha/api.js?onload=recaptchaCallBack&render=6Ld-jL0UAAAAANlyPp6pI1o9u3vFsTyUh0J5L9nS HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 09 Feb 2023 06:07:16 GMT
date: Thu, 09 Feb 2023 06:07:16 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 607
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/wingame/61/images/background_texture.png
200 OK 9.7 kB URL HTTP/2 www.hkselect-61.com/_global/wingame/61/images/background_texture.png
IP
File type PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced\012- data
Hash 5de5fe9c5d4be859d32ed936c2f7c7e3
c4e4264e6e4a159dd3533ef4c7fd42a2b68b1312
38216727e9b7f306a9942e9ea4e85199102152417609c1425b265e7e5a15f6a2
GET /_global/wingame/61/images/background_texture.png HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/_global/wingame/61/css/series.css?2023-02-08.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/png
content-length: 9749
cache-control: public, max-age=86400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12633, status=webp_bigger
etag: "5605089b-3159"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 25 Sep 2015 08:40:59 GMT
strict-transport-security: max-age=31536000
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c80d8c1b4eb-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27116, version 1.0\012- data
Hash 13c1ac7fc8f934e169620e81471a3a54
d111242b230c54204e9ec061537869f8ce20cb53
b38977ea35fde92fe200fa14ac7cc55e2edce54b998ce9a08734ba1dd9053fed
GET /s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hkselect-61.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:07:24 GMT
expires: Sat, 03 Feb 2024 02:07:24 GMT
cache-control: public, max-age=31536000
age: 532792
last-modified: Mon, 11 Jul 2022 20:35:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 06:07:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hkselect-61.com/_global/js/s5-bfp.js?603575072
200 OK 168 kB URL HTTP/2 www.hkselect-61.com/_global/js/s5-bfp.js?603575072
IP
File type ASCII text, with very long lines (4458), with CRLF, LF line terminators
Size 168 kB (167688 bytes)
Hash 5b97b994bbe2ee0249c88b1cb9e47ca8
2be743897ba7246ae3dde26bb8443c38d0e6fb40
69e2f7240633220ae08390ec3e60c5b04f98d97bf321562a208046596bfc013f
GET /_global/js/s5-bfp.js?603575072 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 12 Mar 2020 13:46:39 GMT
etag: W/"5e6a3d3f-2e71"
x-map-context: hk
x-served-by: a-04
expires: Fri, 10 Feb 2023 06:07:16 GMT
cache-control: public, max-age=86400
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 796a6c81290ab4eb-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11978
Expires: Thu, 09 Feb 2023 09:26:55 GMT
Date: Thu, 09 Feb 2023 06:07:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11978
Expires: Thu, 09 Feb 2023 09:26:55 GMT
Date: Thu, 09 Feb 2023 06:07:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce710ab5746832fe637fada3e6d63abf
d545c85d4a8cf92dc8b88db0a056623d1ef7a943
40bae4a2fb9dd60e9339d15ad0838f3ca83b5b6275c35cd22878b6783fcd6247
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: 7e2b1875-ecf9-4ee9-8d5a-a911fdd28d16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AColKGwOIAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e42153-097b982244d3ad7b6f49a392;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 22:25:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Uvdg9MhYDsR9aC-s_chZDKp7_5RzhQfTwXZ0epZVW7TUVdrdADUEfQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 03:49:25 GMT
age: 8272
etag: "d545c85d4a8cf92dc8b88db0a056623d1ef7a943"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95081172f8e19d19921acc802488e019
8531c150cb11de44361a95624b11cf46b9e0ba02
7a2d8f012c7d590f3f39ad834d4f3f9fb729143b7395bc588bd608b5bdee039b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15019
x-amzn-requestid: 574e3e2c-2fbe-4215-9500-021147338832
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f583LHiioAMFqkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a82d-4f12aac524c39f822ca4f422;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:11:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _3jIo3Giw3zmTmnSkJArAllT6uigN7EEzLPfkGpd6168_mSdqdk_Cg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 12:41:28 GMT
age: 62749
etag: "8531c150cb11de44361a95624b11cf46b9e0ba02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28ae39b238f62d6c0aee7bb16ff863d5
3c2247e40747c3ca72dd7877facee9a9fecf0f59
c530ba92455ea45e14410f497d2df04cc1321e2937cc7e81aa75f4fc14206a7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3014
x-amzn-requestid: bec40915-584b-48fc-94c2-293e96567474
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKGrGoAMFelg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-2250ff00772341353151dd34;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmJxNCnPKUD5O4HCWIjqeVaanXL50KZ60Xu1iOC6bisRBDJNkVXvww==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:37 GMT
etag: "3c2247e40747c3ca72dd7877facee9a9fecf0f59"
content-type: image/jpeg
age: 30760
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb7c8b758fe17f6c06ce2bebb5008495
032d747cf20951f6ca6fd51489fefd7c09c4948d
835d89e028ec4c85a845f2835cb5eddb9653937f6736e2713b671419474608ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12811
x-amzn-requestid: be33f9ef-31cb-4572-9f22-0a433423e195
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChzZFiWIAMFgmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4167b-70ed2a756b8da4372ccc1f83;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:39:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JpeDqbyAp9qLkVVqTKxmVy96vqBfyK4-GDiWdgkAjQlUN4Fu160VLA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:45:55 GMT
etag: "032d747cf20951f6ca6fd51489fefd7c09c4948d"
content-type: image/jpeg
age: 30082
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3509a9bb-f5d1-4723-96d3-e2a87a28bbf4.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3509a9bb-f5d1-4723-96d3-e2a87a28bbf4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6c45da743665658afcfbf2309e1594b
04d025452dcec571f3eb6068499290d86e0c4c30
3ddfcf83ea18ba20700364c7095750a142a15575c988ba5688ed2f4dbbba4ee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3509a9bb-f5d1-4723-96d3-e2a87a28bbf4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6471
x-amzn-requestid: ab4c8119-a2f0-4b3d-bbed-b34c5a0a7a30
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ACiGaGsjoAMFmZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e416f5-7298e0530bee8f997b552e6e;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:41:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b74bFyh7eYS-pBQhcW3BItLbjUzmTdCMoKd_lpXXwqVWyfhfdKUP0A==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:46:24 GMT
age: 30053
etag: "04d025452dcec571f3eb6068499290d86e0c4c30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c1f5626e7ff7e681468c3c5820f3633
a8bb267f929b734a53b3dab0283c717270f6eb43
38d81274cc9f71f149091f72494c74872d99909c69d612a595c930c4755c4da3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 1b0f88cf-460b-4ed2-8235-86c9e3e3ff93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffW2uG3LIAMF3cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d604f7-42e5c38315bdbd47615985b6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 05:32:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: j7JqKdXPBH0hFdoy4Qj0ttGzX93CyNdiv6Tn5h1F_zwNhxwb4IYBTA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:28:34 GMT
age: 27523
etag: "a8bb267f929b734a53b3dab0283c717270f6eb43"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 21:48:03 GMT
expires: Fri, 02 Feb 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 548354
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 17:20:45 GMT
expires: Tue, 06 Feb 2024 17:20:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 218792
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/fonts/font-awesome-4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/2 www.hkselect-61.com/_global/fonts/font-awesome-4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /_global/fonts/font-awesome-4.6.3/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.hkselect-61.com/_global/fonts/font-awesome-4.6.3/css/font-awesome.min.css?2023-02-08.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:17 GMT
content-type: application/octet-stream
content-length: 71896
last-modified: Thu, 18 Aug 2016 09:52:51 GMT
etag: "57b58573-118d8"
x-map-context: hk
x-served-by: a-01
expires: Fri, 10 Feb 2023 06:07:17 GMT
cache-control: public, max-age=86400
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 80338
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c851c4eb4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/js/framework/MooTools-Core-1.6.0-compressed.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/js/framework/MooTools-Core-1.6.0-compressed.js?2023-02-08.2
IP
GET /_global/js/framework/MooTools-Core-1.6.0-compressed.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=89700
etag: W/"5a059201-15e64"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 10 Nov 2017 11:48:17 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefd8b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/wingame/61/js/series.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/wingame/61/js/series.js?2023-02-08.2
IP
GET /_global/wingame/61/js/series.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=21670
etag: W/"5ee9ccab-54a6"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Wed, 17 Jun 2020 07:56:27 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefe4b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/wingame/45/js/sweepstake.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/wingame/45/js/sweepstake.js?2023-02-08.2
IP
GET /wingame/45/js/sweepstake.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=3615
etag: W/"5fb7961e-e1f"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 20 Nov 2020 10:10:38 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fffe7b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/fonts/opensans/font_opensans.css
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/fonts/opensans/font_opensans.css
IP
GET /_global/fonts/opensans/font_opensans.css HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/_global/wingame/61/css/series.css?2023-02-08.2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=2449
etag: W/"5b596f5d-991"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 26 Jul 2018 06:51:09 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 80338
server: cloudflare
cf-ray: 796a6c804851b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Heebo:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Heebo:400,700
IP
GET /css?family=Heebo:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Feb 2023 06:07:16 GMT
date: Thu, 09 Feb 2023 06:07:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/js/moolidator.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/js/moolidator.js?2023-02-08.2
IP
GET /_global/js/moolidator.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=42954
etag: W/"63c517c3-a7ca"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Mon, 16 Jan 2023 09:24:19 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-04
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefd9b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/favicon.ico
200 OK 0 B URL HTTP/2 www.hkselect-61.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: image/x-icon
last-modified: Fri, 01 May 2020 13:12:04 GMT
etag: W/"5eac2024-10be"
x-map-context: hk
x-served-by: a-04
expires: Fri, 10 Feb 2023 06:07:16 GMT
cache-control: public, max-age=86400
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 80338
vary: Accept-Encoding
server: cloudflare
cf-ray: 796a6c81b97fb4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/wingame/61/css/series.css?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/wingame/61/css/series.css?2023-02-08.2
IP
GET /_global/wingame/61/css/series.css?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=20000
etag: W/"604b22a8-4e20"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 12 Mar 2021 08:13:28 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fdfcbb4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/css/default.css?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/css/default.css?2023-02-08.2
IP
GET /_global/css/default.css?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=4327
etag: W/"5c6a6438-10e7"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Mon, 18 Feb 2019 07:52:24 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fdfc7b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/fonts/font-awesome-4.6.3/css/font-awesome.min.css?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/fonts/font-awesome-4.6.3/css/font-awesome.min.css?2023-02-08.2
IP
GET /_global/fonts/font-awesome-4.6.3/css/font-awesome.min.css?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 18 Aug 2016 09:52:51 GMT
etag: W/"57b58573-71c7"
x-map-context: hk
x-served-by: a-03
expires: Fri, 10 Feb 2023 06:07:16 GMT
cache-control: public, max-age=86400
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fdfc9b4eb-OSL
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/js/moolidator_rules.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/js/moolidator_rules.js?2023-02-08.2
IP
GET /_global/js/moolidator_rules.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=26678
etag: W/"636380db-6836"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 03 Nov 2022 08:50:35 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-02
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefdcb4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
200 OK 0 B URL HTTP/2 www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
IP
GET /cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/html;charset=UTF-8
x-firstpage: 1
x-page: pregame
x-map-context: hk
x-served-by: a-02
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796a6c7c4cfab4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/wingame/45/css/sweepstake.css?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/wingame/45/css/sweepstake.css?2023-02-08.2
IP
GET /wingame/45/css/sweepstake.css?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=5458
etag: W/"636e467b-1552"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 11 Nov 2022 12:56:27 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-04
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefd6b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/js/scripts.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/js/scripts.js?2023-02-08.2
IP
GET /_global/js/scripts.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=56730
etag: W/"62d900e4-dd9a"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Thu, 21 Jul 2022 07:31:48 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-01
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefdfb4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/wingame/global/js/global.js?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/wingame/global/js/global.js?2023-02-08.2
IP
GET /wingame/global/js/global.js?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: application/javascript
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=11038
etag: W/"5eac2024-2b1e"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Fri, 01 May 2020 13:12:04 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-03
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fefe0b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.hkselect-61.com/_global/wingame/61/themes/black_blue_000000/theme.css?2023-02-08.2
200 OK 0 B URL HTTP/2 www.hkselect-61.com/_global/wingame/61/themes/black_blue_000000/theme.css?2023-02-08.2
IP
GET /_global/wingame/61/themes/black_blue_000000/theme.css?2023-02-08.2 HTTP/1.1
Host: www.hkselect-61.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hkselect-61.com/cgi-bin/wingame.pl?partner_pk=111&wingame_pk=45&freetest_pk=31&wingame_special_prize1=pregame_prize_prize_name_814_1526973948&sub_id=1721-97835&sub_id_postback=1026373954b898b1ea18dbaf41c84b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 06:07:16 GMT
content-type: text/css
cache-control: public, max-age=86400
cf-bgj: minify
cf-polished: origSize=4828
etag: W/"5af02c5e-12dc"
expires: Fri, 10 Feb 2023 06:07:16 GMT
last-modified: Mon, 07 May 2018 10:37:18 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-map-context: hk
x-served-by: a-04
cf-cache-status: HIT
age: 36040
server: cloudflare
cf-ray: 796a6c7fdfceb4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
179.61.143.121
142.250.74.164
23.36.76.226
99.81.126.252
104.18.28.160