firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 14:06:39 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nSc50BsyAN8nhPV17XRXZMijjBD3Mc9CYLjvIzEK-uXpeBay2NnEdw==
Age: 3294
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13541
Expires: Sat, 10 Sep 2022 18:47:14 GMT
Date: Sat, 10 Sep 2022 15:01:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2Mca7VBHKOxIe-BbhdgUGobMOol4fyI2zEkRG7lbdA6l9sj211QduQ==
age: 27861
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
162.0.215.196301 Moved Permanently 707 B URL HTTP/1.1 pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
IP 162.0.215.196:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /hitman-4-blood-money-game-highly-compressed HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 10 Sep 2022 15:01:33 GMT
server: LiteSpeed
location: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 15:01:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 10 Sep 2022 14:56:07 GMT
Expires: Sat, 10 Sep 2022 14:56:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EBXnZeimBPtshkaZ3hk-OIjXjNQDjJd93qQ8xafnWGdl6_sPHej8YA==
Age: 327
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 950d386d64261cd47ddc9dc3629d3406
de2545ab59d7a25d186bd5964c711a3e885aba5a
45b626505eea46499ca6debcaaf402d6e65f1baa8729a14f7fc233f168b949a5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 15:01:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 15:48:40 GMT
Expires: Thu, 15 Sep 2022 15:48:39 GMT
Etag: "de2545ab59d7a25d186bd5964c711a3e885aba5a"
Cache-Control: max-age=434224,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74890a29dc8f0afe-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6306
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 15:01:34 GMT
Last-Modified: Sat, 10 Sep 2022 13:16:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.187.146.10101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.146.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hEbl8N0COvVThQYRX/mPEg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: at+nOtM+zsp/0tUyNz3XZNQ0ssw=
pcgameshighlycompressed.com/wp-includes/css/dist/block-library/style.min.css?ver=8fecff3e1180f5226c721ca0643b17f6
162.0.215.196200 OK 11 kB URL HTTP/2 pcgameshighlycompressed.com/wp-includes/css/dist/block-library/style.min.css?ver=8fecff3e1180f5226c721ca0643b17f6
IP 162.0.215.196:0
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=8fecff3e1180f5226c721ca0643b17f6 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Tue, 12 Jul 2022 17:25:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.10
162.0.215.196200 OK 8.1 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.10
IP 162.0.215.196:0
File type ASCII text, with very long lines (41903)
Hash 351f6d04da42e84081bb64f7eaad472e
bed9521b7d5242b7a0f357b97d9dbdd44ff515ac
a46c5274f934dd9adbf9ea948a0d56b2ead50d931e7625cb40bd49d06cd3ddf9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Mon, 21 Jun 2021 08:42:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8111
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.10
162.0.215.196200 OK 28 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.10
IP 162.0.215.196:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 23bd7d24aa0086eefb51853a2bbdb99a
312edb2fbb86d62d97c09b29464155bf6fc1a707
8d72a90c72badb76227dbbe734c8c7b81b57ee2abae176200e0ebd7769ccf59b
GET /wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Sun, 23 May 2021 09:00:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28359
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.10
162.0.215.196200 OK 9.0 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.10
IP 162.0.215.196:0
File type ASCII text, with very long lines (54141)
Hash 0e8e0fbf2c19b512088ae020c51d199d
e880490725c00d8ef4acdaea47e46ca8220af9f6
2f53003e7f3eb92c2aa2b312d3227b8c95d662b7642926282d66194845fac28f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Sun, 14 Feb 2021 11:24:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8950
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/css/helpers.min.css?ver=1662122041
162.0.215.196200 OK 3.4 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/css/helpers.min.css?ver=1662122041
IP 162.0.215.196:0
File type ASCII text, with very long lines (15346), with no line terminators
Hash 7e260605fab8befe59964bc4fdc16054
d91a3c50bc6c9d0f51fdf44091239390f5a25604
a7ca5b0444b98dad318d9ad4e2c0b7a0497cee53bb498af81155097ecd8a5b90
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/min/1/wp-content/themes/jannah/assets/css/helpers.min.css?ver=1662122041 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 12:34:01 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3398
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/css/fontawesome.css?ver=1662122042
162.0.215.196200 OK 12 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/css/fontawesome.css?ver=1662122042
IP 162.0.215.196:0
File type ASCII text, with very long lines (59379), with no line terminators
Hash b3d52312332a6323acfd67f0a3a716bc
ad74b3eae7f788b8478a0a92ace01dfb0dbeab0d
50ba158650bc6e21acea05aca51d0df22979d61ce5a3fe12ae0474e02755619d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/min/1/wp-content/themes/jannah/assets/css/fontawesome.css?ver=1662122042 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 12:34:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12071
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/single.min.css?ver=5.4.10
162.0.215.196200 OK 7.5 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/css/single.min.css?ver=5.4.10
IP 162.0.215.196:0
File type ASCII text, with very long lines (40484)
Hash a6f79df56b3c811e37c74fdd048f513e
9e4646c2aeda49b7987c7c07167d404102c9992a
728fe30f72a53fd3b93f047ee10e2b33c3c8ff2f11d9683bbb37bc318e1c0a5c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/jannah/assets/css/single.min.css?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Sun, 30 May 2021 04:00:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7490
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=1662122042
162.0.215.196200 OK 227 B URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=1662122042
IP 162.0.215.196:0
File type ASCII text, with no line terminators
Hash 004619b78c79718f956d18e718909dac
8fd7e832fb4d2482dbc982e6d97cc7a31527dcfc
820c67431773236e5d8af5717b61b582aa7e9fd9b2ba7ff7a5a333c33e839aa0
GET /wp-content/cache/min/1/wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=1662122042 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 12:34:02 GMT
accept-ranges: bytes
content-length: 227
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.8.2
162.0.215.196200 OK 3.0 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.8.2
IP 162.0.215.196:0
File type ASCII text, with very long lines (1577)
Hash f9bd58ff6ff8b6d519f6bedfd8466af2
058a2339d68391def5388ec52f38ab89ee06d877
7b854fbfa48aecfb3cbc79b884fb79385f08fbc994bf60269a68424c18e9958a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.8.2 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Sat, 27 Aug 2022 05:25:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3016
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
162.0.215.196200 OK 30 kB URL HTTP/2 pcgameshighlycompressed.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 162.0.215.196:0
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Sun, 01 Aug 2021 13:23:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
162.0.215.196200 OK 4.0 kB URL HTTP/2 pcgameshighlycompressed.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 162.0.215.196:0
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Thu, 03 Jun 2021 15:23:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.10
162.0.215.196200 OK 6.6 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.10
IP 162.0.215.196:0
File type HTML document, ASCII text, with very long lines (22472)
Hash e3627488ba0cc349ef5f3547fd0700ce
b806f27dd6395f210768e5a780338bb67b7f48fd
23b2cc238227cbd173d31dc0f2e67b0b70a379b9f336360b5253c9e126b15f67
GET /wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Sun, 22 Aug 2021 16:59:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6618
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.10
162.0.215.196200 OK 5.2 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.10
IP 162.0.215.196:0
File type ASCII text, with very long lines (16791)
Hash a1a254deb16fe9521ac611c97904f45f
c79b8b2ec98c7a3596ee04976579e4b0e4104ad0
c4e57d3559bc47d842f61fab138787c7fc3b7c6c96b218a0bb6d4b934a4726b1
GET /wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2020 09:17:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5221
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-includes/js/comment-reply.min.js?ver=8fecff3e1180f5226c721ca0643b17f6
162.0.215.196200 OK 1.2 kB URL HTTP/2 pcgameshighlycompressed.com/wp-includes/js/comment-reply.min.js?ver=8fecff3e1180f5226c721ca0643b17f6
IP 162.0.215.196:0
File type ASCII text, with very long lines (2946)
Hash 7d8acf37582bf5212cbf4e31105de2ac
19581f31ceed66b11804eb6a2b3d00d43f73f071
d48d28cdb9d3dd8b812129663e5cc8b373b67629e2e65988d2b274960f7b847f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=8fecff3e1180f5226c721ca0643b17f6 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 19:55:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1228
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/js/live-search.js?ver=1662122042
162.0.215.196200 OK 4.4 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/js/live-search.js?ver=1662122042
IP 162.0.215.196:0
File type ASCII text, with very long lines (14387)
Hash 5cd51207e12f4717183ddf628de1b257
749a94d61a60db721491c93304131d09ada66030
1a1d8228ceb5880419c48ee2ddc887de89dafb0c919231b5dc9448ea3c6f5e53
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/min/1/wp-content/themes/jannah/assets/js/live-search.js?ver=1662122042 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 12:34:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4379
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js
162.0.215.196200 OK 2.6 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js
IP 162.0.215.196:0
File type ASCII text, with very long lines (7889)
Hash 38f598ed10cc662f33bcb2a719de6e52
7da764b9b7ff5b9679f0e4313fb5587252b54c2c
e99237b16aef4b9b118b75356607354192e33695c1e15372d9bb86bf07483db7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Fri, 04 Jun 2021 15:58:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2570
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/single.min.js?ver=5.4.10
162.0.215.196200 OK 1.8 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/js/single.min.js?ver=5.4.10
IP 162.0.215.196:0
File type HTML document, ASCII text, with very long lines (5548)
Hash c49758fb9c87b7bf3efb4853f78c7f52
f23885232bbfe8fd776224eb5b6bfb8083706c60
5dc33b1b977cf3e01ef5c423077064128b7e6ab3769e3271e2f446598c742456
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/jannah/assets/js/single.min.js?ver=5.4.10 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Wed, 04 Nov 2020 18:18:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1809
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/busting/1/gtm-bc9e987b622b81f14949aa1a01f7b1a9.js
162.0.215.196200 OK 40 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/busting/1/gtm-bc9e987b622b81f14949aa1a01f7b1a9.js
IP 162.0.215.196:0
File type ASCII text, with very long lines (1615)
Hash 7912b0db606cbdbb6399da472149026e
b21470a6ea37ecb1d2d38febc5ecca269b90a3d8
369dc74311501694e05cc94210f43835baeba523e2a9287fa0450d5fb7b6f80c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/busting/1/gtm-bc9e987b622b81f14949aa1a01f7b1a9.js HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:34 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 12:34:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 39772
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff
162.0.215.196200 OK 40 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff
IP 162.0.215.196:0
File type Web Open Font Format, TrueType, length 40536, version 2.0\012- data
Hash 9773facce663de3a1554b64583ae667c
f77938c8eb3bf18fc89fdfdf6653aaf2a6ea2a8e
82649ad7d4ec9c61f1e525b2dade75153ffb03610b88d22e1ba3ba98fd55de81
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/wp-content/cache/min/1/wp-content/themes/jannah/assets/css/helpers.min.css?ver=1662122041
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:35 GMT
content-type: font/woff
last-modified: Wed, 19 Aug 2020 16:31:50 GMT
accept-ranges: bytes
content-length: 40536
date: Sat, 10 Sep 2022 15:01:35 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
162.0.215.196200 OK 50 kB URL HTTP/2 pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
IP 162.0.215.196:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11940), with CRLF, LF line terminators
Hash 8eed955e0ea5279fcc6f004ea868f96c
c969682968eb08ef45095c315f675ee29809956f
229f04be89240359cfce6bf1ce50132a596edddf31e54cb7c0aa73789d56222d
Analyzer Verdict Alert fortinet Malware
GET /hitman-4-blood-money-game-highly-compressed HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
last-modified: Sat, 10 Sep 2022 10:45:17 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Sat, 10 Sep 2022 15:01:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/wp-content/cache/busting/google-tracking/ga-d40531c5e99a6f84e42535859476fe35.js
162.0.215.196200 OK 20 kB URL HTTP/2 pcgameshighlycompressed.com/wp-content/cache/busting/google-tracking/ga-d40531c5e99a6f84e42535859476fe35.js
IP 162.0.215.196:0
File type ASCII text, with very long lines (1325)
Hash 7bb58f3fa5cfb76b9e27ca665fe71aec
46cc62a4fa43c369289efa474f9544b4ce09c47f
051fa94f895c4899dd2dc3c32245d259b1b3a9ea5a57848cbe1aacb2214fcab9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/busting/google-tracking/ga-d40531c5e99a6f84e42535859476fe35.js HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 17 Sep 2022 15:01:35 GMT
content-type: application/javascript
last-modified: Sat, 10 Sep 2022 01:44:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 19489
date: Sat, 10 Sep 2022 15:01:35 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13147
Expires: Sat, 10 Sep 2022 18:40:42 GMT
Date: Sat, 10 Sep 2022 15:01:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13147
Expires: Sat, 10 Sep 2022 18:40:42 GMT
Date: Sat, 10 Sep 2022 15:01:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F650e3430-718e-4b70-a2f5-c4bec923098f.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F650e3430-718e-4b70-a2f5-c4bec923098f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b9bf10913988c3d8098baae8eb29f937
9b1ec76924c5e221cea1930bdd5b4a83b5247485
9119956d8afb52924448c5a9e39d5708c365ae771eb9cae9865dd332e2151a28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F650e3430-718e-4b70-a2f5-c4bec923098f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7948
x-amzn-requestid: 2cd47c00-69f6-4ead-ba92-3fe84fae8483
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkOLFVbIAMFxMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb3f4-5b0150e42047a034114c0b2f;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:45:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: 2oqlYjwZJq_MHdp4ChE70SCSAYE4D6IvF09_KU88cM_3Los_4-vT6Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:46 GMT
age: 61849
etag: "9b1ec76924c5e221cea1930bdd5b4a83b5247485"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b74df88-0b3c-4495-ac87-32b567c99e82.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b74df88-0b3c-4495-ac87-32b567c99e82.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12d95a798c8334bb3bff65feb188205e
466df69c851018063e9a45205d0d8688dbcf1e1c
2481bb0562a647aa22bc56931da8eb433a008fffcad62b51912d32e52616f229
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b74df88-0b3c-4495-ac87-32b567c99e82.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6628
x-amzn-requestid: a50790d8-1534-49f7-aec4-79a21d959e16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj5PH91oAMFZSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb36e-670f1e3f185c60ff212fde71;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:43:10 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: yDbg3M_T8LDhrtyx2X-GupahP1h0agvpQXV1FzEqBBAGmIRWeJmRQA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:53:49 GMT
age: 61666
etag: "466df69c851018063e9a45205d0d8688dbcf1e1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ade70e6dbcfb3ca1765f95112671e69
3768753be084c0e0fc268be5b192d02d769114b6
9670a3bf2476ba193cfeb3153c1254bdcfc980a28503dda0d9b398a3a59f53f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: 720a4111-91de-4672-88c8-f40db517c07d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHsjRE13oAMFbCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63195ae1-288f1f5456bf4d146dcf774c;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 03:00:49 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: CjZw9xgHd4_7KvhiiZEIBivRgoQeh1BYxEc_bOBbTvWoqHgTPq0sSA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 05:37:01 GMT
age: 33874
etag: "3768753be084c0e0fc268be5b192d02d769114b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 71bafbee3867c04c3712ff98a123d52c
ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf
58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: f2Av7EDI_l1jZfe0kR6K2yQNzxbBXdcXJGycIZbOTp4ZkCuusLk4Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:47 GMT
age: 61848
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f8aeb20a6543be83f3e422796c4dc70
4e4e127039dd8099c63c3bde198118d2874f7342
0f9fdd1b577e4719f88620bb451131bfb120790479b4feccb4222647fb3ea453
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7218
x-amzn-requestid: 4e9672b6-5415-4808-9508-22e8c42de448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_QzHffIAMFYTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318459e-743b975a2770e2a90c616d87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dR6KtfbMJzFz0j8zIFUNtdkJHUaerjxWbUyYKBD-jR_uAAvCCty01Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 03:23:21 GMT
age: 41894
etag: "4e4e127039dd8099c63c3bde198118d2874f7342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1abac18a85802f38f08561ac64020b55
afbc7666fa0b2093ef0c5d9a955d54d139c09b30
eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9610
x-amzn-requestid: 34102145-abda-4987-a68d-9069496366ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj0oF7loAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb350-52aee64214c814812c03262e;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 91AsC8-zVFCOPHFb2qnlTev2aXzdCEDYtc68JtYYsQSKS7OFF4QzgQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:00:27 GMT
age: 61268
etag: "afbc7666fa0b2093ef0c5d9a955d54d139c09b30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 15:01:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/plugins/ua/linkid.js
216.239.36.178200 OK 859 B URL HTTP/2 www.google-analytics.com/plugins/ua/linkid.js
IP 216.239.36.178:0
File type ASCII text, with very long lines (1335)
Hash 904463ce35aee800847ab85ec948aaf6
904e4d2647466c7f7e0f7412019984e3b2ccfb24
057b4d29359dfe2536a2ec40243bdfa7b151222efcc1eb358608994a14c34237
GET /plugins/ua/linkid.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 14:26:18 GMT
expires: Sat, 10 Sep 2022 15:26:18 GMT
cache-control: public, max-age=3600
age: 2118
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&aip=1&a=561225847&t=pageview&_s=1&dl=https%3A%2F%2Fpcgameshighlycompressed.com%2Fhitman-4-blood-money-game-highly-compressed&dp=%2Fhitman-4-blood-money-game-highly-compressed&ul=en-us&de=UTF-8&dt=Hitman%204%20Blood%20Money%20Game%20Highly%20Compressed%20Download%20for%20Pc&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=aGBAAUIhAAAAAC~&jid=1048588085&gjid=1479078993&cid=893340538.1662822086&tid=UA-123666082-2&_gid=1377003284.1662822086&_r=1>m=2ou8v0&did=dZGIzZG&gdid=dZGIzZG&z=168029200
216.239.36.178200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&aip=1&a=561225847&t=pageview&_s=1&dl=https%3A%2F%2Fpcgameshighlycompressed.com%2Fhitman-4-blood-money-game-highly-compressed&dp=%2Fhitman-4-blood-money-game-highly-compressed&ul=en-us&de=UTF-8&dt=Hitman%204%20Blood%20Money%20Game%20Highly%20Compressed%20Download%20for%20Pc&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=aGBAAUIhAAAAAC~&jid=1048588085&gjid=1479078993&cid=893340538.1662822086&tid=UA-123666082-2&_gid=1377003284.1662822086&_r=1>m=2ou8v0&did=dZGIzZG&gdid=dZGIzZG&z=168029200
IP 216.239.36.178:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j96&aip=1&a=561225847&t=pageview&_s=1&dl=https%3A%2F%2Fpcgameshighlycompressed.com%2Fhitman-4-blood-money-game-highly-compressed&dp=%2Fhitman-4-blood-money-game-highly-compressed&ul=en-us&de=UTF-8&dt=Hitman%204%20Blood%20Money%20Game%20Highly%20Compressed%20Download%20for%20Pc&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=aGBAAUIhAAAAAC~&jid=1048588085&gjid=1479078993&cid=893340538.1662822086&tid=UA-123666082-2&_gid=1377003284.1662822086&_r=1>m=2ou8v0&did=dZGIzZG&gdid=dZGIzZG&z=168029200 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://pcgameshighlycompressed.com
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pcgameshighlycompressed.com
date: Sat, 10 Sep 2022 15:01:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 15:01:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pcgameshighlycompressed.com/wp-admin/admin-ajax.php?postviews_id=262&action=tie_postviews&_=1662822085670
162.0.215.196200 OK 61 B URL HTTP/2 pcgameshighlycompressed.com/wp-admin/admin-ajax.php?postviews_id=262&action=tie_postviews&_=1662822085670
IP 162.0.215.196:0
File type ASCII text, with no line terminators
Hash 0235b0382e6376617af104962b2c9710
c61f7d8a9601c0c07e086a967d362dbabd4478db
52dd252c228d4b15d2a49834a79a017157e95500cea3857cea23748b5e31a26e
GET /wp-admin/admin-ajax.php?postviews_id=262&action=tie_postviews&_=1662822085670 HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
content-type: text/html; charset=UTF-8
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
content-length: 61
content-encoding: br
vary: Accept-Encoding
date: Sat, 10 Sep 2022 15:01:36 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 572d8ed935df86fde22138e8bfddfd9f
3b25ffe66a762ea032c05b149a29fe0d6faa3687
866c2b16919ab311f906c4e8a074fd93b46f74408c9e2c9a4c30310afa08f047
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9981
x-amzn-requestid: 1a34423c-b2d9-4ae3-a437-eb5717334372
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkiSGjloAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb474-00c79a927f7f7d5d70791b68;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:47:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: jwkD86lz1SUQE__IGBv9RINc-LON017wkTpW7g0ePcMtssqd_POtpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:57:12 GMT
age: 61470
etag: "3b25ffe66a762ea032c05b149a29fe0d6faa3687"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pcgameshighlycompressed.com/favicon.ico
162.0.215.196404 Not Found 0 B URL HTTP/2 pcgameshighlycompressed.com/favicon.ico
IP 162.0.215.196:0
GET /favicon.ico HTTP/1.1
Host: pcgameshighlycompressed.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pcgameshighlycompressed.com/hitman-4-blood-money-game-highly-compressed
Cookie: _ga=GA1.2.893340538.1662822086; _gid=GA1.2.1377003284.1662822086
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
date: Sat, 10 Sep 2022 15:01:36 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2