Report - goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt

Report Overview

Submitted URL
goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt
IP
185.32.28.169
ASN
#15699 OGIC Informatica S.L.
Submitted
2023-01-30 08:02:02
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
region1.analytics.google.com	unknown	2022-03-17T12:26:33Z	2023-03-13T05:11:52Z	1.2 kB	446 B	216.239.32.36
stats.g.doubleclick.net	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	483 B	446 B	173.194.221.155
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
af.games4u.mobi	unknown	2021-04-03T19:49:06Z	2023-02-26T15:25:21Z	11 kB	279 kB	87.250.157.188
www.google.no	25607	2016-04-05T21:50:59Z	2023-03-13T06:26:15Z	481 B	578 B	142.250.74.163
goaserver.com	595430	2019-02-10T13:53:58Z	2023-02-25T03:42:31Z	513 B	438 B	185.32.28.169
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.83.112.49
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	350 B	1.0 kB	54.230.245.100
notify.dcbprotect.com	112896	2018-06-07T00:28:10Z	2023-03-13T00:03:49Z	508 B	300 B	54.155.29.255
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.36.77.32
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	2.1 kB	4.2 kB	142.250.74.131
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	55 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 08:02:01	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:02	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:02	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:02	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:03	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:05	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-01-30 08:02:08	high	Client IP	64.233.163.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt:::	1.1 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 12:32:04 Times Seen1 Hash 0be3980354e435fd2f4592fceffb8f09 a3c57253f4a476ac1ff701fd2078863e637988d5 0c90295c8fc0d730215c0c39ae7d773b40676c8af894e13822c38c656721e25a Loading...

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt:::	456 B	2023-03-08	2023-03-14
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:22:33 Last Seen2023-03-14 19:14:11 Times Seen1 Hash 8640418f43632ba98a668c523b26f6cf 93e44ad65b78b0b42bf318d787308194161c71f6 4fdb01d3d89efd790e2e54ce4f0aa3be1f70f02a0e40fde42c6ffcbaf93c2ea9 Loading...

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js	1.3 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 12:32:04 Times Seen1 Hash aea334d30c54e55b83e3cd7757376236 b1e7bfc78cbc10b5db6f973db572aa36310d5cfb 9c0c60e674c86726521109aa7919c83bc4793c96fb6726ce1bf10a2f2cbff4da Loading...

	af.games4u.mobi/campaignbuilder/build/js/web.bundle.js	244 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/campaignbuilder/build/js/web.bundle.js IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:13:31 Last Seen2023-03-13 21:05:39 Times Seen1 Hash 19a538c9fe81455fa10da525a6d65075 da6268ce725f7eb34c741d278d84ece0f26b6759 ad203750fc4dfd22325e43c029b6974a6a11684017dabfe3d36fa3d1428f491b Loading...

	www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV	124 kB	2023-03-13	2023-03-13
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-5TBFVHV IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:12:52 Last Seen2023-03-13 12:12:52 Times Seen1 Hash 0bfc3bf0fea01c0b5da4a9ce59688c5e f4e1d01c34211ab04e7ffa4c501cde4e1bfac42e 82c0f580b0c070ce94184ecec3ce58ba31a994d5314a6a3f19fcc27898301340 Loading...

	www.googletagmanager.com/gtag/js?id=G-H5HF2L7MYP&l=dataLayer&cx=c	222 kB	2023-03-13	2023-03-13
Pretty URL www.googletagmanager.com/gtag/js?id=G-H5HF2L7MYP&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:12:52 Last Seen2023-03-13 12:12:52 Times Seen1 Hash edd942de4929bdc17b3cfbe46f16953a b1509426696ee3c2b4e105908bcb2cec53cae23e 53d50b5bcbc6ae6abf4527f1e79bd98e21f19c0b419cda4972c3e4c4ae9ff6e1 Loading...

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt:::	91 kB	2023-03-13	2023-03-13
Pretty URL af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188 ASN #15879 KPN B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:12:52 Last Seen2023-03-13 12:12:52 Times Seen1 Hash 7648b8b281d9ae492731481158a09e83 0146290443c54c2187ff2f8908d7ffce6142acb8 006a6c8e72906dfad9dbe7b4dc72b0e4227cfb0afdd7e838058cd4e15c836860 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 5e39880343cf6407699381959cfa122e	99 B	2023-03-08	2024-01-26
Pretty Observations First Seen2023-03-08 09:22:33 Last Seen2024-01-26 13:16:37 Times Seen88 Hash 5e39880343cf6407699381959cfa122e 45be8852a79fc4b9d6a0a8ab761b5a6773004230 4b030bb3b3421fd55a0c6da4463e838d3c6d1a41f7f7d8a5ef4883604c7a1160 Loading...

HTTP Transactions (47)

	URL	IP	Response	Size
	goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt	185.32.28.169	200 OK	20 B
URL HTTP/1.1 goaserver.com/tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt IP 185.32.28.169:0 ASN #15699 OGIC Informatica S.L. File type data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers GET /tracking.php?hash=69521afb2501b747375d9a9956c6f72b&aff_sub=Fq_4qs_Yv2QoOTn90ILIuw7bkZPFgMLPdt4IK2bNxPwHsyB2CDIe24CoMurd7ADP3oTRwlaEKKNAgLTo1Tk90g&source=6815-u34j45u9gt HTTP/1.1 Host: goaserver.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1 `HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Jan 2023 08:01:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Refresh: 0; url=https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Content-Encoding: gzip`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 5eb7c9bc996a0ff420e58af45526f053 8c2614832b8efe1c9da0bbd465d6f3f172d95a9e c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14715 Expires: Mon, 30 Jan 2023 12:07:04 GMT Date: Mon, 30 Jan 2023 08:01:49 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 3eb88dea4fe00db1182370e72683c3ab ca520abf1e91bfd2aef40c6a1270a911071e8922 d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7" Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16920 Expires: Mon, 30 Jan 2023 12:43:49 GMT Date: Mon, 30 Jan 2023 08:01:49 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 03092d1a1bc7ac91ee342a1a7ab2a562 52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a 03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9709 Expires: Mon, 30 Jan 2023 10:43:38 GMT Date: Mon, 30 Jan 2023 08:01:49 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 30 Jan 2023 07:43:11 GMT content-type: application/json age: 1118 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: T8pB/gqX8YaWv440GhfL9vmmblJRfd+AZNhOkIIfecU5TdosZpJ4I9EasvAVCRgL2Sg6MeUtO0E= x-amz-request-id: CNHQ7PZAVSSMTS98 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 30 Jan 2023 07:21:42 GMT age: 2407 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:49 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 9b93c5772deddd50fa3acc953309544a cbd30aa62a329839ed2550bc2fe650915dc52438 170a86d8082f83b23d592073c287c23dfb0117d0d062f1cfa5d150e2f331d8ce HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "170A86D8082F83B23D592073C287C23DFB0117D0D062F1CFA5D150E2F331D8CE" Last-Modified: Sun, 29 Jan 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21594 Expires: Mon, 30 Jan 2023 14:01:44 GMT Date: Mon, 30 Jan 2023 08:01:50 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 30 Jan 2023 07:41:41 GMT age: 1209 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E" Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11946 Expires: Mon, 30 Jan 2023 11:20:56 GMT Date: Mon, 30 Jan 2023 08:01:50 GMT Connection: keep-alive`

	push.services.mozilla.com/	35.83.112.49	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 35.83.112.49:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: /jHIjd/BabdiEWatjwqIpQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: VxA/fI/lzm16D42IdUqBlksnWtA=`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-100.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-100.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15808, version 1.0\012- data Size 16 kB (15808 bytes) Hash 7370c3679472e9560965ff48a4399d0b 7d02b9455622a72bfc55a938a3e6bcccfcd57d0e 12823d585605238121554aff8bb060a235dc36f37efd9fb1e7e6ea1a9622bc35 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-100.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 15808 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3dc0" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data Size 16 kB (15736 bytes) Hash 479970ffb74f2117317f9d24d9e317fe 81c796737cbe44d4a719777f0aff14b73a3efb1e 48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-regular.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 15736 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3d78" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-700.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-latin-700.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15816, version 1.0\012- data Size 16 kB (15816 bytes) Hash 2735a3a69b509faf3577afd25bdf552e 8621aff863b67040010ccc183da5b9079ce6fd1d b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-latin-700.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 15816 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3dc8" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/logo.png	87.250.157.188	200 OK	21 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/logo.png IP 87.250.157.188:0 ASN #15879 KPN B.V. File type PNG image data, 849 x 196, 8-bit colormap, non-interlaced\012- data Size 21 kB (21272 bytes) Hash 8952497245fa0450d43911b0ae4302f0 57528311f43da22bb786a0cea684a1fecb286996 675d23d8c4696e763f8972674b441303194717414e5cda8b9683874296985fcf HTTP Headers GET /campaignbuilder/build/brands/games4u.mobi/logo.png HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: image/png content-length: 21272 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-5318" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/hero.webp	87.250.157.188	200 OK	14 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/hero.webp IP 87.250.157.188:0 ASN #15879 KPN B.V. File type RIFF (little-endian) data, Web/P image\012- data Size 14 kB (14384 bytes) Hash 80f821be0d14103e6620a0688803e729 01a4389c297e89322595b366f0a61c336f3570b9 47d4b52d4201bb82bf84e63618e1256b91b4cd88e223e534fc0b43b104be13ba HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/hero.webp HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: image/webp content-length: 14384 last-modified: Wed, 25 May 2022 12:34:02 GMT etag: "628e223a-3830" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic-green-red_1/background_desktop.png	87.250.157.188	200 OK	1.6 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic-green-red_1/background_desktop.png IP 87.250.157.188:0 ASN #15879 KPN B.V. File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Size 1.6 kB (1630 bytes) Hash 3aefa7190dd972a5e900df7f20d8280c 1e0f3f8382e291d9aa03d53260f22041a7b4ece0 3c29c8f8a01e54c178fdcb1d22e5a31e18709a7bdb96d81ce62ab3fbd145f9c5 HTTP Headers GET /campaignbuilder/dist/22_do_generic-green-red_1/background_desktop.png HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: image/png content-length: 1630 last-modified: Wed, 25 May 2022 12:06:35 GMT etag: "628e1bcb-65e" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18372, version 1.0\012- data Size 18 kB (18372 bytes) Hash 133a35226263508aa1a8d7a24577f6c6 c1956cbf071c0eb98c52785e31ec54b3647456ea f7036321e186f09555e2e6a5ffd1b3198a5d9f621e1f600708737f5148841637 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-regular.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 18372 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-47c4" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18192, version 1.0\012- data Size 18 kB (18192 bytes) Hash 461dc3a0d0fde028a0bc55b0376be45f 32e93bfb2f0a92b1a2bde6ce8fcbc4c95276987d 95c412ec067f0bb6b324d3866ed7899c8e9c8eb9e2c4170290dd1762d4a08857 HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-100.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 18192 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-4710" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2	87.250.157.188	200 OK	18 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 18504, version 1.0\012- data Size 18 kB (18504 bytes) Hash 4a359a06b958c307b76312ed337e2839 d34392477d9f10116e4813af7428788e1b548207 eee08ba32f5ddfd37fd3ff72218a38ef478d2971264a31273e450d30a5ea9d1f HTTP Headers GET /campaignbuilder/build/fonts/roboto-v20-vietnamese-700.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 18504 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-4848" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/fonts/roboto-v29-latin-900.woff2	87.250.157.188	200 OK	16 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/fonts/roboto-v29-latin-900.woff2 IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Web Open Font Format (Version 2), TrueType, length 15724, version 1.0\012- data Size 16 kB (15724 bytes) Hash 318ee20bc3ab288eaaff82768d2f883b f4a1bb63ac600302e23e8585eb00b6c99f232ed5 0e868ca932480407e63d27e8e868cb1514581142928b9be15ec9039bf5fe348f HTTP Headers GET /campaignbuilder/build/fonts/roboto-v29-latin-900.woff2 HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://af.games4u.mobi/campaignbuilder/build/css/def.bundle.css Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/font-woff2 content-length: 15724 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-3d6c" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ba2ca6af7b23ce2e11aa4f9d86e66269 212aef55d64b6add292dcf6241b16e7c93d1bae2 f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	af.games4u.mobi/campaignbuilder/build/js/web.bundle.js	87.250.157.188	200 OK	116 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/js/web.bundle.js IP 87.250.157.188:0 ASN #15879 KPN B.V. File type data Size 116 kB (116006 bytes) Hash cbb4b098c640632b28c7d4601c50fc17 3d6e1fef0dbc932b2cbf46d5a538a53c0fa8d4cc 903c8c93b69a910f948c0de0ef86c87747587ec8a2952ec7b47a050d64a4ca1e HTTP Headers GET /campaignbuilder/build/js/web.bundle.js HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/javascript last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-3b7d8" x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/favicon.png	87.250.157.188	200 OK	2.1 kB
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/brands/games4u.mobi/favicon.png IP 87.250.157.188:0 ASN #15879 KPN B.V. File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data Size 2.1 kB (2124 bytes) Hash 32aa0e083926f921a490cfa09dc49112 1bfc98804c6f06426da0feb2e3fde847249de57c 3711c6c645ccba832ab0554ece19168cb1e43d32ee63a378b842c45ef1231f75 HTTP Headers GET /campaignbuilder/build/brands/games4u.mobi/favicon.png HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: image/png content-length: 2124 last-modified: Mon, 23 Jan 2023 14:55:21 GMT etag: "63ce9fd9-84c" access-control-allow-origin: * vary: Accept cache-control: public x-backend: portal03 accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash ba2ca6af7b23ce2e11aa4f9d86e66269 212aef55d64b6add292dcf6241b16e7c93d1bae2 f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:50 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash a369a4445d1fccf2ce045c3c4c3f3d67 d6f618e6150a4f9ac6eb5df4a503141a635605a2 d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:51 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1&z=1240345368	142.250.74.163	200 OK	42 B
URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1&z=1240345368 IP 142.250.74.163:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1&z=1240345368 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 30 Jan 2023 08:01:51 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash a369a4445d1fccf2ce045c3c4c3f3d67 d6f618e6150a4f9ac6eb5df4a503141a635605a2 d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:51 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash dfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7884 Expires: Mon, 30 Jan 2023 10:13:15 GMT Date: Mon, 30 Jan 2023 08:01:51 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash dfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A" Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7884 Expires: Mon, 30 Jan 2023 10:13:15 GMT Date: Mon, 30 Jan 2023 08:01:51 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (11095 bytes) Hash bb1a5e0a2bb1cacf87189373c118adf4 079974268f755aa38fb2cb32b8bcb748353c793f 1b0519e6bfca30a31b83d427302f7e22140f5b2da6f13cac37ea9c07abc42676 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f96350b-0dd8-46ee-a270-85f96329b7c9.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 11095 x-amzn-requestid: dc7c00e2-cd2d-4265-8763-3dd7dbe223ac x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkFyEhJIAMFjpw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6f1-541a17c362e95dfa5e90f58f;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: t1IqXPqG23nYmxAPOJFaZhKDD49KD8fREs8L59AGjx-1AzoQOeSO0A== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:53:08 GMT age: 36523 etag: "079974268f755aa38fb2cb32b8bcb748353c793f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281d3bcc-ce90-407c-89ce-33d8423b4048.jpeg	34.120.237.76	200 OK	5.5 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281d3bcc-ce90-407c-89ce-33d8423b4048.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 5.5 kB (5462 bytes) Hash a60c45fc1156fadfbe47afe4e9e282da e8db47e0aa028a846fd631cf2f2d5a979ee51e08 9a91bd22d5174fc3adbc6b24de6197be4f694bc46e8cc32124212a17a5af3f5a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281d3bcc-ce90-407c-89ce-33d8423b4048.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5462 x-amzn-requestid: 4ec670d9-7dfd-45a9-93bc-935dfd991c20 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkF8HWWIAMFpnA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6f2-3bda5c87690a91851b2de9e6;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: IktxPIqbHTkANUYO5E64t0-RHGBrPlJt-MhuQoBxKWSxhbz1wzVDEA== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:53:08 GMT age: 36523 etag: "e8db47e0aa028a846fd631cf2f2d5a979ee51e08" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg	34.120.237.76	200 OK	7.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.7 kB (7679 bytes) Hash 3e04b9eaf7449828136ad59e4c9d69f1 b820be4ed885dcf288eb6460c57e1fa7b1c7c476 df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7679 x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkEtEfHoAMFaNA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 21:52:09 GMT age: 36582 etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg	34.120.237.76	200 OK	5.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 5.8 kB (5764 bytes) Hash 546f1cb9f94ea553ae884a6f50c6bd3d fd08d9841bcd8864aaf2e5d93ca61b31246b6db5 5aba48ac6c65e371c6c1aeee43f97670f196d3a3933b9f5812a67be90b7dbdfa HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5764 x-amzn-requestid: 33ebf979-ba40-451e-bbdb-3ee4a9dc07ae x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhksyGRVoAMF5UQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e7eb-55fcbb4d6d88dbf758409801;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:59 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: X3lzViVGoynSgoeenp6EIU2E3FMSRlKNGOy73pIOAASV11hOk2B4UA== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 22:11:27 GMT age: 35424 etag: "fd08d9841bcd8864aaf2e5d93ca61b31246b6db5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg	34.120.237.76	200 OK	9.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.2 kB (9167 bytes) Hash 3be81f83687ddb6c93d3ff3c09a9dba2 50a48e737310d3f31840db4301b25927fbcc12c5 e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9167 x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fPGLfFtOIAMFp7w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0 x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 20:46:17 GMT age: 40534 etag: "50a48e737310d3f31840db4301b25927fbcc12c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg	34.120.237.76	200 OK	9.5 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.5 kB (9457 bytes) Hash 51aa950d5eed7b90cab6632107092edc e4388ced02e5576867e77547496dec1ac2338ef7 588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9457 x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fhkBOGHVoAMFQtw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0 x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Sun, 29 Jan 2023 22:00:38 GMT age: 36073 etag: "e4388ced02e5576867e77547496dec1ac2338ef7" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	region1.analytics.google.com/g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=1525862402&_gaz=1&cid=775048763.1675065722&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675065722&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675065709goa63d7796d2d552%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud	216.239.32.36	204 No Content	0 B
URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=1525862402&_gaz=1&cid=775048763.1675065722&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675065722&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675065709goa63d7796d2d552%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud IP 216.239.32.36:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /g/collect?v=2&tid=G-H5HF2L7MYP&gtm=2oe1p0&_p=1525862402&_gaz=1&cid=775048763.1675065722&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675065722&sct=1&seg=0&dl=https%3A%2F%2Faf.games4u.mobi%2Fspc%2Fdef%2F22_do_generic_green-red_1%2F%3Ffc%3Dch%26pni%3D15063%26pci%3D3939951%26pcu%3Db06fa68e-703f-47b0-8dde-24f295c19821%26clickid%3D1675065709goa63d7796d2d552%26pubid%3D15%3A%3A%3A6815-u34j45u9gt%3A%3A%3A&dt=af.games4u.mobi&en=page_view&_fv=1&_nsi=1&_ss=1&ep.campaign=22_do_generic_green-red_1&ep.country_code=ch&ep.language_code=de&ep.brand=games4u&ep.page=web&epn.ba=0&epn.autopin=0&ep.connection=WIFI&ep.evina=on-block&ep.network_name=GameofAds%20-%20AF&epn.pci=3939951&epn.pni=15063&ep.provider=WIFI&ep.publisher=15%253A%253A%253A6815-u34j45u9gt%253A%253A%253A&ep.orientation=landscape&ep.broker=messagecloud HTTP/1.1 Host: region1.analytics.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 `HTTP/2 204 No Content access-control-allow-origin: https://af.games4u.mobi date: Mon, 30 Jan 2023 08:01:51 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash e9eba61fbe87bc53d60d0fdd1ba6adb4 8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07 9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:51 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	stats.g.doubleclick.net/g/collect?v=2&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1	173.194.221.155	204 No Content	0 B
URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1 IP 173.194.221.155:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `POST /g/collect?v=2&tid=G-H5HF2L7MYP&cid=775048763.1675065722&gtm=2oe1p0&aip=1 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0` `HTTP/2 204 No Content access-control-allow-origin: https://af.games4u.mobi date: Mon, 30 Jan 2023 08:01:51 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash e9eba61fbe87bc53d60d0fdd1ba6adb4 8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07 9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 30 Jan 2023 08:01:51 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.sca1b.amazontrust.com/	54.230.245.100	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 54.230.245.100:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash dc1e74e65148158f0002ce268013fff2 9f86fbb8b537a1b347c616abf534e729d61063e2 48947ec23a7d57b65c41f554a52d936a819b14be02963298c7db8206b18b4e2c HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=169370 Date: Mon, 30 Jan 2023 08:01:52 GMT Etag: "63d75d1b-1d7" Expires: Wed, 01 Feb 2023 07:04:42 GMT Last-Modified: Mon, 30 Jan 2023 06:00:59 GMT Server: ECS (nyb/1D17) X-Cache: Miss from cloudfront Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Ths4EdyKdWDRgV4BaOgUvUkSh5Dmrw1bIOUFo9REjPRJIaSHzC-jTA== Age: 3823

	notify.dcbprotect.com/A1033184850417486404440028668208882022202084222422	54.155.29.255	200 OK	20 B
URL HTTP/1.1 notify.dcbprotect.com/A1033184850417486404440028668208882022202084222422 IP 54.155.29.255:0 ASN #16509 AMAZON-02 File type data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `POST /A1033184850417486404440028668208882022202084222422 HTTP/1.1 Host: notify.dcbprotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 9331 Origin: https://af.games4u.mobi Connection: keep-alive Referer: https://af.games4u.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/1.1 200 OK Date: Mon, 30 Jan 2023 08:01:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Content-Encoding: gzip`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: text/css last-modified: Wed, 25 May 2022 12:34:02 GMT vary: Accept-Encoding etag: W/"628e223a-8ec" x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/css/countries.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/css/countries.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/build/css/countries.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: text/css last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-680" x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/dist/22_do_generic_green-red_1/campaign.bundle.js HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: application/javascript last-modified: Wed, 25 May 2022 12:34:02 GMT vary: Accept-Encoding etag: W/"628e223a-507" x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt:::	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site `HTTP/2 200 OK server: nginx content-type: text/html; charset=UTF-8 vary: Accept-Encoding cache-control: no-cache date: Mon, 30 Jan 2023 08:01:50 GMT set-cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; path=/; HttpOnly device_view=full; expires=Thu, 02-Mar-2023 08:01:50 GMT; Max-Age=2678400; path=/; HttpOnly x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

	af.games4u.mobi/campaignbuilder/build/css/def.bundle.css	87.250.157.188	200 OK	0 B
URL HTTP/2 af.games4u.mobi/campaignbuilder/build/css/def.bundle.css IP 87.250.157.188:0 ASN #15879 KPN B.V. File type Size 0 B (0 bytes) Hash HTTP Headers GET /campaignbuilder/build/css/def.bundle.css HTTP/1.1 Host: af.games4u.mobi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://af.games4u.mobi/spc/def/22_do_generic_green-red_1/?fc=ch&pni=15063&pci=3939951&pcu=b06fa68e-703f-47b0-8dde-24f295c19821&clickid=1675065709goa63d7796d2d552&pubid=15:::6815-u34j45u9gt::: Cookie: PHPSESSID=scnd8648g3vvsh70l2abbno8j6; device_view=full Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 30 Jan 2023 08:01:50 GMT content-type: text/css last-modified: Mon, 23 Jan 2023 14:55:21 GMT vary: Accept-Encoding etag: W/"63ce9fd9-9d80" x-backend: portal03 content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (47)

URL HTTP/1.1

IP