www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
200 OK 21 kB URL HTTP/1.1 www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3896)
Hash 83cbc0c591936a25d2907e7937295087
dbfcdaaf760556ffe33c6552d02f51673fe8c53c
3f06d0e379aec9930f31342abb9a5e84a8e5df54df73b41326f6607b93e5bec3
GET /how-to-play-fantasy.survival.game.rpg-on-pc.html HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 26 Jan 2023 11:38:46 GMT
Server: nginx/1.10.3 (Ubuntu)
Content-Encoding: gzip
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC229_GB-london-london-3-cache-2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11519
Expires: Thu, 26 Jan 2023 14:50:45 GMT
Date: Thu, 26 Jan 2023 11:38:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11457
Expires: Thu, 26 Jan 2023 14:49:43 GMT
Date: Thu, 26 Jan 2023 11:38:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14629
Expires: Thu, 26 Jan 2023 15:42:35 GMT
Date: Thu, 26 Jan 2023 11:38:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 11:35:16 GMT
content-type: application/json
age: 210
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qf/lVB4PZaHC/tv52InvZcVExOW1JX9kamp2Q8PUIXFR758RFbRC+PWvsYJ1jA3j1wcOpA1vXi0=
x-amz-request-id: VG98HS4YD7RGJGGV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 11:20:04 GMT
age: 1122
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.memuplay.com/home/Public/css/public.css
200 OK 19 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/public.css
IP
Hash 6af4607a849d6914f660602744d89329
3aa5ce4339c36d266dba2581a3797fdc170d9e2c
d87cb55915acdae85bb18fadc88fe04f027fdff455b679c7116d07d6d43af76f
GET /home/Public/css/public.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 19408
Connection: keep-alive
Expires: Thu, 26 Jan 2023 11:49:31 GMT
Date: Thu, 26 Jan 2023 10:49:31 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Tue, 17 Jan 2023 07:03:55 GMT
ETag: "63c6485b-4bd0"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC104_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/css/napps.css
200 OK 46 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/napps.css
IP
Hash f0a131d86bc670eaf614672bf0335fbd
f39cca6058321ec17a68412be88a093f6a08899f
d5ce5fb7b870b9234b8dca0b698282377e76350e03068a71b3f02426d00da3a8
GET /home/Public/css/napps.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 45554
Connection: keep-alive
Expires: Thu, 26 Jan 2023 11:57:58 GMT
Date: Thu, 26 Jan 2023 10:57:58 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Tue, 17 Jan 2023 08:02:32 GMT
ETag: "63c65618-b1f2"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC103_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/css/swiper-3.4.2.min.css
200 OK 18 kB URL HTTP/1.1 www.memuplay.com/home/Public/css/swiper-3.4.2.min.css
IP
File type ASCII text, with very long lines (17459)
Hash 6af34d0737ad0ca608111771cf74cc79
15d0417baa08a741c6aee19fdfbf4813635f98f8
47b0e7129add982c0e394f0dfa8d9621e6c9e4126859b26e1ad25c18def0d812
GET /home/Public/css/swiper-3.4.2.min.css HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 17759
Connection: keep-alive
Expires: Thu, 26 Jan 2023 12:35:40 GMT
Date: Thu, 26 Jan 2023 11:35:40 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 04 Jan 2019 03:04:07 GMT
ETag: "5c2ecd27-455f"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC104_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/js/public.js
200 OK 3.0 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/public.js
IP
File type HTML document, ASCII text
Hash 89dbc462a2f0c8badbf1d2d3d6d25182
e96f19ffc7a5a7d9dc459a37bb079b8ee7e78cff
8d0b7961aa9f703d352bf481f9bc493aa889faaefde5f4b2977e7106a7baa073
GET /home/Public/js/public.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2951
Connection: keep-alive
Expires: Thu, 26 Jan 2023 11:56:07 GMT
Date: Thu, 26 Jan 2023 10:56:07 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Wed, 11 Nov 2020 05:20:57 GMT
ETag: "5fab74b9-b87"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC103_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/js/libs/jquery.lazyload.js
200 OK 5.6 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/jquery.lazyload.js
IP
File type ASCII text, with CRLF line terminators
Hash 203331c5ee8e3f19a17663c915a161f6
2eb6f854159cc5aafe23dded2a421ee3b2ec6129
c02be89b2ec96232ab4f8abb022f03e4613a6676d245b0be38bb357835a95b67
GET /home/Public/js/libs/jquery.lazyload.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 5649
Connection: keep-alive
Expires: Thu, 26 Jan 2023 11:57:30 GMT
Date: Thu, 26 Jan 2023 10:57:30 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Sat, 13 Jul 2019 10:55:11 GMT
ETag: "5d29b88f-1611"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC110_US-DistColumbia-washingtonDC-1-cache-1, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/gp_logo_dark.png
200 OK 4.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/gp_logo_dark.png
IP
File type PNG image data, 183 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e96b2177f0b7d59d9b79d51ab43fb34
b48d1a54d81fb8b9eace2c92e5e04909ed3c7306
6cdcbabefa22d9c14b4bb467d71999a9b1ad50914f34c0ea0c1ebd6e332e250c
GET /home/Public/img/gp_logo_dark.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4161
Connection: keep-alive
Expires: Sat, 25 Feb 2023 07:13:58 GMT
Date: Thu, 26 Jan 2023 07:13:58 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Wed, 11 Nov 2020 05:20:57 GMT
ETag: "5fab74b9-1041"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC103_US-Florida-tampa-1-cache-2, BC228_GB-london-london-3-cache-2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.memuplay.com/home/Public/js/libs/jquery-1.11.0.min.js
200 OK 96 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 52d16e147b5346147d0f3269cd4d0f80
4566b5815f47f976c7c3d3083c600ad5561b6fc0
2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17
GET /home/Public/js/libs/jquery-1.11.0.min.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 96380
Connection: keep-alive
Expires: Thu, 26 Jan 2023 12:06:06 GMT
Date: Thu, 26 Jan 2023 11:06:06 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 04 Jan 2019 03:04:07 GMT
ETag: "5c2ecd27-1787c"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC110_US-DistColumbia-washingtonDC-1-cache-1, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/js/libs/swiper-3.4.2.jquery.min.js
200 OK 87 kB URL HTTP/1.1 www.memuplay.com/home/Public/js/libs/swiper-3.4.2.jquery.min.js
IP
File type ASCII text, with very long lines (32000)
Hash d7749c8a97e6513c348d34998ffd4f9c
5454d61c1a9d2c3e97a0dcd3fcb42bb41b110a9b
3e5eb7885cd58a769515cdd0aab42fab70e2985d5f78fe96a9e926e634da6d7a
GET /home/Public/js/libs/swiper-3.4.2.jquery.min.js HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 86923
Connection: keep-alive
Expires: Thu, 26 Jan 2023 12:16:54 GMT
Date: Thu, 26 Jan 2023 11:16:54 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 04 Jan 2019 03:04:07 GMT
ETag: "5c2ecd27-1538b"
Cache-Control: max-age=3600
Accept-Ranges: bytes
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC229_GB-london-london-3-cache-2
www.googletagmanager.com/gtag/js?id=UA-75186244-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-75186244-1
IP
File type ASCII text, with very long lines (1759)
Hash 5ede513518d2acdc3e8d83e4fdd465de
87005573b6249c7618412a6625abbaec96e59021
56c11ec19a566bcd125ea70623845d9dc4968fdfa734cab0f894118ab8760e20
GET /gtag/js?id=UA-75186244-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 11:38:46 GMT
expires: Thu, 26 Jan 2023 11:38:46 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44018
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-44963QLX2Y
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-44963QLX2Y
IP
File type ASCII text, with very long lines (21849)
Hash b9ecbbde35b0d55dde07f6ad9b88f298
d4694f7726a2a3d0f6d90d85584b8604a03be938
40c2fd8c92659647a671d1a69bf17682e2e7b0300c72a88187b75f9bbd88a6ea
GET /gtag/js?id=G-44963QLX2Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 11:38:46 GMT
expires: Thu, 26 Jan 2023 11:38:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77883
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.memuplay.com/home/Public/img/icons3.png
200 OK 44 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/icons3.png
IP
File type PNG image data, 600 x 800, 8-bit/color RGBA, interlaced\012- data
Hash 1ced9f353ca3bfee605f78a8e643675a
62a6deaf438b5524d1db32e4f851aa0b67bf9520
d6a992c7c242b1276bc64dfe973b642c3a54de60e8412639d54aa4ab3cd04191
GET /home/Public/img/icons3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 43748
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:12:14 GMT
Date: Thu, 26 Jan 2023 06:12:14 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Wed, 29 Sep 2021 07:24:32 GMT
ETag: "615414b0-aae4"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC104_US-Florida-tampa-1-cache-2, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/twitter3.png
200 OK 2.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/twitter3.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash bab7b3c1345ae27dab399359d3d24599
261c9870939670c51153bcf31ba92f92b5d31cf1
a62e4e3a56af248e4cf7c7171d84b770a1574bf38d3903facbbbab13926870b5
GET /home/Public/img/twitter3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2937
Connection: keep-alive
Expires: Fri, 24 Feb 2023 11:59:45 GMT
Date: Wed, 25 Jan 2023 11:59:45 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 04 Jan 2019 03:04:07 GMT
ETag: "5c2ecd27-b79"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC102_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/xiazai-d.png
200 OK 3.5 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/xiazai-d.png
IP
File type PNG image data, 276 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d01aa5d1f0b4ad37e3746995501cccf
2f0428136642fb85eac6e039231bf573fd7af775
5a526105acda1cc5cb1ae0f10acfea913a9c8d28b606b3ea2109b5438e56e95d
GET /home/Public/img/xiazai-d.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3477
Connection: keep-alive
Expires: Sat, 25 Feb 2023 05:31:18 GMT
Date: Thu, 26 Jan 2023 05:31:18 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 10 Jul 2020 07:26:01 GMT
ETag: "5f081809-d95"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC229_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/facebook3.png
200 OK 1.5 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/facebook3.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a40db18d16da81455b0f4c4dd038b21
7009f004b124ca4280283c24572ac4057ebb418b
5724ecc22cf4c88a6c7fa686942deb302226238a710aedf898d6217cede97cff
GET /home/Public/img/facebook3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1503
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:12:14 GMT
Date: Thu, 26 Jan 2023 06:12:14 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 31 Dec 2020 02:38:05 GMT
ETag: "5fed398d-5df"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC109_US-DistColumbia-washingtonDC-1-cache-1, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/icons.png
200 OK 13 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/icons.png
IP
File type PNG image data, 400 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 944572ee71a21c841372b3c5b03cb4bf
67bad54e37e85f75d0f2991bfdfbde11f322030e
c71f4a5f63dd40dcc21e8fcf88eb71f0603031b80c4619b1909bf30cb135c540
GET /home/Public/img/icons.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 13047
Connection: keep-alive
Expires: Fri, 24 Feb 2023 12:00:28 GMT
Date: Wed, 25 Jan 2023 12:00:28 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 10 Jul 2020 07:26:01 GMT
ETag: "5f081809-32f7"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/reddit.png
200 OK 2.1 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/reddit.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 018c6f19eec8c0604e1764af22140890
55e5a6ce18dce3b1dff2b8e7fed776776636dd3f
b2c525fa721978883aaa2997f06074cce30a6917d518563d20e1560422620968
GET /home/Public/img/reddit.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2138
Connection: keep-alive
Expires: Fri, 24 Feb 2023 12:00:58 GMT
Date: Wed, 25 Jan 2023 12:00:58 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 10 Jan 2019 09:01:07 GMT
ETag: "5c3709d3-85a"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC104_US-Florida-tampa-1-cache-2, BC226_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/vkontakte.png
200 OK 1.8 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/vkontakte.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c14c106e0d9a13502d94976e53d1054
507fe9e19d5b1ab6a7175310115523d496ad7654
5c3c8e38ec3417bd8f8bc4694f1d6a04944b41fe765475c72b88b6040152b366
GET /home/Public/img/vkontakte.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1823
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:14:38 GMT
Date: Thu, 26 Jan 2023 06:14:38 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 10 Jan 2019 09:01:07 GMT
ETag: "5c3709d3-71f"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC101_US-Florida-tampa-1-cache-2, BC229_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/whatsapp.png
200 OK 2.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/whatsapp.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 861760441c118bc7633be541ff4d7068
e25fb96b6b0fb3b91d24c24ddde452258371d6ea
7636296dc96ea074d76d6f270f3e0d65ba378d2c939b4a9c85f4fdb998ce6e19
GET /home/Public/img/whatsapp.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2206
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:14:38 GMT
Date: Thu, 26 Jan 2023 06:14:38 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 31 Dec 2020 02:38:05 GMT
ETag: "5fed398d-89e"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC101_US-Florida-tampa-1-cache-2, BC229_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/app-background.jpg
200 OK 1.1 MB URL HTTP/1.1 www.memuplay.com/home/Public/img/app-background.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:09:25 14:53:24], baseline, precision 8, 3840x2880, components 3\012- data
Size 1.1 MB (1057195 bytes)
Hash 6a02e2a2ad412fc7c976ed5554cc9b6b
be91d14aedeb7ed64ff3ff6e8d3ec34aa99af59a
16785487d433cdd80371a22b59c006edc72ee98e6338fddbdd3478d78192dc42
GET /home/Public/img/app-background.jpg HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1057195
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:08:28 GMT
Date: Thu, 26 Jan 2023 06:08:28 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 10 Jul 2020 07:26:01 GMT
ETag: "5f081809-1021ab"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC106_US-DistColumbia-washingtonDC-1-cache-1, BC229_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/nadvantage3.png
200 OK 2.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage3.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ad7a1d6790f87d9e06f0aeadb39467f
b7318fb13b9e5c2a0cabad7cfee99161674fcc3c
b68ac56fded7a94b63a7fb7869d5613a6983b22055ce7feafd6529a34e5c310d
GET /home/Public/img/nadvantage3.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2906
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:14:38 GMT
Date: Thu, 26 Jan 2023 06:14:38 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 17 Oct 2019 06:11:18 GMT
ETag: "5da80606-b5a"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC229_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/nusernote5.png
200 OK 2.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nusernote5.png
IP
File type PNG image data, 24 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ae73b92f38ee4df8591e3cf9113ce82
4f22f781669cc6e9e210fe88079a84e96fc77606
60c9ba57c71d89711c13b200284a0ed3f39b26eca62c73564a5b16babb0f0e96
GET /home/Public/img/nusernote5.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2191
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:56:50 GMT
Date: Thu, 26 Jan 2023 06:56:50 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 10 Jul 2020 07:26:01 GMT
ETag: "5f081809-88f"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC101_US-Florida-tampa-1-cache-2, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/nadvantage2.png
200 OK 1.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage2.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash 82c681e3388d342b1ed8d2f50a144d2d
735ebaa86ad79786e0203d967c493359ae43b176
962f4dac671cf363cc297a0a3244fb39e46b3149cbcaf208254b3be7c1204b47
GET /home/Public/img/nadvantage2.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1885
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:48:15 GMT
Date: Thu, 26 Jan 2023 06:48:15 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 17 Oct 2019 06:11:18 GMT
ETag: "5da80606-75d"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC108_US-DistColumbia-washingtonDC-1-cache-1, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/youtube.png
200 OK 1.2 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/youtube.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 201d0ba94255f906d6d7f1f221b58504
365f2e1922fb1de68ec6fd0cac02492c75070741
bcb19924877ee0223dca75af549d354d1db0798ba8f3a4ebe296a7859d6b86c0
GET /home/Public/img/youtube.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/public.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1231
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:12:14 GMT
Date: Thu, 26 Jan 2023 06:12:14 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 31 Dec 2020 02:38:05 GMT
ETag: "5fed398d-4cf"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC102_US-Florida-tampa-1-cache-2, BC228_GB-london-london-3-cache-2
www.memuplay.com/home/Public/img/nadvantage1.png
200 OK 1.7 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/nadvantage1.png
IP
File type PNG image data, 296 x 296, 8-bit/color RGBA, non-interlaced\012- data
Hash e83a245d5d53fa933d04b833346ee5f4
f7eef6d7a081871c1d0e272f466e902da4f0c25d
8e8a51e021ece885f3f18140aa50e0b8bddc920cb718d24f998db981d226e8a8
GET /home/Public/img/nadvantage1.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/home/Public/css/napps.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1674
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:48:15 GMT
Date: Thu, 26 Jan 2023 06:48:15 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Thu, 17 Oct 2019 06:11:18 GMT
ETag: "5da80606-68a"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC104_US-Florida-tampa-1-cache-2, BC228_GB-london-london-3-cache-2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 47d71bf163265666c21e2410fb568043
54a4b0f241af261f878967ce058f5885be476cc4
8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dl.memuplay.com/new_market/img/com.dts.freefireth.icon.2023-01-11-21-05-37.png
200 OK 430 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.dts.freefireth.icon.2023-01-11-21-05-37.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 430 kB (430226 bytes)
Hash 014538bfd7f2cdaaf85088be3e71f066
fd395105fcc374e9f0dc914bb2c7b611a86e4576
862e6692c225087f91f8b9e31bb52e5196167ada850e9d6658d1f89e86420de9
GET /new_market/img/com.dts.freefireth.icon.2023-01-11-21-05-37.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 430226
server: nginx/1.18.0 (Ubuntu)
date: Wed, 11 Jan 2023 22:08:05 GMT
last-modified: Wed, 11 Jan 2023 13:05:37 GMT
etag: "63beb421-69092"
expires: Fri, 10 Feb 2023 22:08:05 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5F5bUMIafECetwuv_dhy4LC2IgF4c1K6I26F8sVbS0KhZP0HMU10DQ==
age: 1258242
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.dts.freefiremax.icon.2023-01-11-21-22-08.png
200 OK 419 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.dts.freefiremax.icon.2023-01-11-21-22-08.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 419 kB (419379 bytes)
Hash a0d8b2536f459796b715675a378abe60
976ad7e79495f5b6eb8326b8fc0243ac262a4c81
995fe780cf8533c74e6d3f69d25afdd97b5479c47a62e93dd41e84345afa7c59
GET /new_market/img/com.dts.freefiremax.icon.2023-01-11-21-22-08.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 419379
server: nginx/1.18.0 (Ubuntu)
date: Wed, 11 Jan 2023 13:27:09 GMT
last-modified: Wed, 11 Jan 2023 13:22:09 GMT
etag: "63beb801-66633"
expires: Fri, 10 Feb 2023 13:27:09 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f9HL3E7u3MxQcsRIbXeQXbGH7y3T8u06M20AyUDha_e6RxP21SDSqQ==
age: 1289498
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.innersloth.spacemafia.icon.2022-12-17-09-11-07.png
200 OK 67 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.innersloth.spacemafia.icon.2022-12-17-09-11-07.png
IP
File type JPEG image data, baseline, precision 8, 512x512, components 3\012- data
Hash 21de6f05ba8e2b32946668656cb918a6
6e51610717c778d3f829af907527e5033f35c742
015d1cecf14c3ef529e92d788304fe58aa571c4e3ebaf4d78d5eea44f693c844
GET /new_market/img/com.innersloth.spacemafia.icon.2022-12-17-09-11-07.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 67423
server: nginx/1.18.0 (Ubuntu)
date: Wed, 28 Dec 2022 01:15:43 GMT
last-modified: Sat, 17 Dec 2022 01:11:07 GMT
etag: "639d172b-1075f"
expires: Fri, 27 Jan 2023 01:15:43 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v8Hvl2e2PK5FGbF6I_btgz_WtZWxdFAP9TIi46jKD3m8p41O6pY4og==
age: 2542984
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc1.2021-03-22-10-13-23.jpg
200 OK 322 kB URL HTTP/2 dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc1.2021-03-22-10-13-23.jpg
IP
File type PNG image data, 551 x 310, 8-bit/color RGB, non-interlaced\012- data
Size 322 kB (321638 bytes)
Hash 57689b913a73229c4b41fb60153c09ef
8e62835c7050f45c9b4533b5ca03abbf1b41dcd8
c7464a25f0ecf8df1c7bb8316ac77e01628c7f4383bf190d47e00d5e0b5935a2
GET /new_market/img/fantasy.survival.game.rpg.sc1.2021-03-22-10-13-23.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 321638
server: nginx/1.18.0 (Ubuntu)
date: Mon, 16 Jan 2023 22:18:07 GMT
last-modified: Mon, 22 Mar 2021 02:13:24 GMT
etag: "6057fd44-4e866"
expires: Wed, 15 Feb 2023 22:18:07 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oQl7shtRH_EwqpAdOrr9LCu74yY-r4_2bIobmIztdl-KQVHjpNalTg==
age: 825640
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png
200 OK 412 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 412 kB (412232 bytes)
Hash 939fb848a3bf2380ce0d3923185d2cae
7cdfe96a237715476b0a385859d6d668c40bd683
fff4dc0d14bf18e0877e08e3dabe208f2a1d4d002cc6dd862957a7dcf86224a3
GET /new_market/img/com.activision.callofduty.shooter.icon.2023-01-13-21-02-56.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 412232
server: nginx/1.18.0 (Ubuntu)
date: Fri, 13 Jan 2023 13:03:01 GMT
last-modified: Fri, 13 Jan 2023 13:02:56 GMT
etag: "63c15680-64a48"
expires: Sun, 12 Feb 2023 13:03:01 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xNXULnM22LLyl0lQFo8Rix58pbSECdt2noUvunBnMyM_n95-QMMxBg==
age: 1118146
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png
200 OK 423 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 423 kB (422731 bytes)
Hash 6a79c6b810420a84428ce8099b911b90
d29a0a4fd8a6365639fda1d88bc7729ccb0aec8b
532bf0f874e16735bb1c8bf9cc063d8b51882568f47068fe9c74247cc24eda5f
GET /new_market/img/com.maleo.bussimulatorid.icon.2022-12-10-09-28-15.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 422731
server: nginx/1.18.0 (Ubuntu)
date: Sun, 15 Jan 2023 00:31:22 GMT
last-modified: Sat, 10 Dec 2022 01:28:15 GMT
etag: "6393e0af-6734b"
expires: Tue, 14 Feb 2023 00:31:22 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w-nikHCXU-l8M6fQibyy_wsXuswXt8JLxiv-XkfzBK2ndJ0W4Qq6yQ==
age: 990445
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.icon.2021-03-22-10-13-23.png
200 OK 13 kB URL HTTP/2 dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.icon.2021-03-22-10-13-23.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3\012- data
Hash 9aef2678840abfb39214302c85650db1
b059f7a2959f443753a8ed4eccd284840fc306cc
3fd43f81b772909b1da07ee4aa89a841bc80ab2586b211df5b832b3b20da22be
GET /new_market/img/fantasy.survival.game.rpg.icon.2021-03-22-10-13-23.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 13384
server: nginx/1.18.0 (Ubuntu)
date: Sat, 14 Jan 2023 16:45:29 GMT
last-modified: Mon, 22 Mar 2021 02:13:24 GMT
etag: "6057fd44-3448"
expires: Mon, 13 Feb 2023 16:45:29 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NDU8jr3nkbFpefFNPws654kP5nb6y-QK9vGZ3NrD0dybydKrkmepuA==
age: 1018398
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.tencent.ig.icon.2023-01-06-21-10-14.png
200 OK 417 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.tencent.ig.icon.2023-01-06-21-10-14.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 417 kB (416955 bytes)
Hash ebe4c3a3d00e00e9b26d18fcde77a3b6
e60bde6ff2b7754f7cfddeacd07764a8f48d2257
79e358cc6eeb80ca09ffe177810233ca8a9b7a775d79bdbe2f669c202a99dfde
GET /new_market/img/com.tencent.ig.icon.2023-01-06-21-10-14.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 416955
server: nginx/1.18.0 (Ubuntu)
date: Fri, 06 Jan 2023 13:22:16 GMT
last-modified: Fri, 06 Jan 2023 13:10:14 GMT
etag: "63b81db6-65cbb"
expires: Sun, 05 Feb 2023 13:22:16 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gRRDEUt9hkemNs88-BBnMany4aISWuR9aED4rfmrg6zVfpTwjbhJQQ==
age: 1721791
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.studio27.MelonPlayground.icon.2023-01-19-09-11-45.png
200 OK 177 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.studio27.MelonPlayground.icon.2023-01-19-09-11-45.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 177 kB (177247 bytes)
Hash 4257768b7ea6e5a8194dba53c8a8b83f
6a61b61d74b7679a91f02aceee3c0f3505da7deb
dc88cf6da4e6ea9e74ca5d5b1b327a40d4d9d4d2242d4cb70d16e8bec8cc0c9e
GET /new_market/img/com.studio27.MelonPlayground.icon.2023-01-19-09-11-45.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 177247
server: nginx/1.18.0 (Ubuntu)
date: Thu, 19 Jan 2023 01:25:39 GMT
last-modified: Thu, 19 Jan 2023 01:11:45 GMT
etag: "63c898d1-2b45f"
expires: Sat, 18 Feb 2023 01:25:39 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e4Rd2BmdrkGS6G4wPfC9ie4GmIjI6Bpq0dt2iSNE-9rf39vSh931uA==
age: 641588
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png
200 OK 41 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 512x512, components 3\012- data
Hash b3375007ffc3f1a8a68b214f1bc7e71c
9905617dc601759b9bec0a137841de245c1285c8
d752283c45ed1cffded22492bf140987e06cea262dfbdb05dabbb22482527626
GET /new_market/img/com.TwentySeven.MelonPlayground.icon.2022-11-29-21-55-20.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 40619
server: nginx/1.18.0 (Ubuntu)
date: Wed, 28 Dec 2022 07:10:44 GMT
last-modified: Tue, 29 Nov 2022 13:55:20 GMT
etag: "63860f48-9eab"
expires: Fri, 27 Jan 2023 07:10:44 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ahp3n2Qa6v__8hsECvhNER1A6WEFFJr7X7Zuv7c62dicunlD5REtVw==
age: 2521683
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.supercell.brawlstars.icon.2022-12-21-21-08-10.png
200 OK 52 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.supercell.brawlstars.icon.2022-12-21-21-08-10.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash 717c29eda79f7c096ff31c2d187e45b9
46cb8ff82dba13d9241a18c29b7db7d7a503cce6
b46d7a5ff2c6d205a81854cff4ceac2b3c5ceb539340fea7ce6a7ce3634ae2c7
GET /new_market/img/com.supercell.brawlstars.icon.2022-12-21-21-08-10.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 51975
server: nginx/1.18.0 (Ubuntu)
date: Tue, 10 Jan 2023 22:11:02 GMT
last-modified: Wed, 21 Dec 2022 13:08:10 GMT
etag: "63a3053a-cb07"
expires: Thu, 09 Feb 2023 22:11:02 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SIu_P-WdkolpFrMPghglUFm1VJfpOjtxg5l5S0gNWx6kCtmhDDDiuA==
age: 1344465
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.Ycherrab.BendyScary.icon.2022-12-07-21-14-41.png
200 OK 63 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.Ycherrab.BendyScary.icon.2022-12-07-21-14-41.png
IP
File type PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 0652be9e57b80de4a06be714aaf80fbc
13442202da1bd0b9637ceab642e07c4dd379acdb
bcd667ccca24db9ea782831028b60e38b68f3d4e9adad18fcab8579995acee18
GET /new_market/img/com.Ycherrab.BendyScary.icon.2022-12-07-21-14-41.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 62807
server: nginx/1.18.0 (Ubuntu)
date: Mon, 16 Jan 2023 18:31:09 GMT
last-modified: Wed, 07 Dec 2022 13:14:43 GMT
etag: "639091c3-f557"
expires: Wed, 15 Feb 2023 18:31:09 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HMZ7XjMwDBCAO0mdAsTz6rYt1-nn_wXflWUdYrTwCQelc7GbQWKyJA==
age: 839258
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc0.2021-03-22-10-13-23.jpg
200 OK 231 kB URL HTTP/2 dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc0.2021-03-22-10-13-23.jpg
IP
File type PNG image data, 551 x 310, 8-bit/color RGB, non-interlaced\012- data
Size 231 kB (230764 bytes)
Hash 4e5810e37cf7f783b1ff13f7134f0154
5c50e127cea331c3c20fe2f46517ad42744c708b
4a751118217c5e08d3f0d862a45c14fbd00d098491b8e943eacfae20ba4542b2
GET /new_market/img/fantasy.survival.game.rpg.sc0.2021-03-22-10-13-23.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 230764
server: nginx/1.18.0 (Ubuntu)
date: Tue, 03 Jan 2023 01:03:07 GMT
last-modified: Mon, 22 Mar 2021 02:13:24 GMT
etag: "6057fd44-3856c"
expires: Thu, 02 Feb 2023 01:03:07 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ULBSeK38IEiBY1kkAjDZ3vXHTYQtkY1Mc5-TQ_htL-biJnQofQZ1mQ==
age: 2025340
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.kayac.DrawFight.icon.2023-01-10-09-11-24.png
200 OK 190 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.kayac.DrawFight.icon.2023-01-10-09-11-24.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 190 kB (190089 bytes)
Hash 3c698cbcd8f8487ad8a466d683026ddd
0f69577d138dfdc388eafec70181e48f78a398c4
e4511ddefb1320cc73028e2b2b12689d6043fdaa23001812f5fa79d18d1ff395
GET /new_market/img/com.kayac.DrawFight.icon.2023-01-10-09-11-24.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 190089
server: nginx/1.18.0 (Ubuntu)
date: Tue, 10 Jan 2023 12:11:44 GMT
last-modified: Tue, 10 Jan 2023 01:11:24 GMT
etag: "63bcbb3c-2e689"
expires: Thu, 09 Feb 2023 12:11:44 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _c2bSt2CZyG_hLU60vl-fCYtv3OXLZqu962vcM9PGg3f3y3t0f6VmQ==
age: 1380423
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.kamilbilge.supercloner3d.icon.2022-06-07-21-02-53.png
200 OK 124 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.kamilbilge.supercloner3d.icon.2022-06-07-21-02-53.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 124 kB (124049 bytes)
Hash eba07780776886b6193856033c3861a5
e616e939b8a12d658c7075c045eff0e96d2ce269
574b1c56ec7434fd432368527dc434eea209a08068cc6fbe58b4cead9812f0e3
GET /new_market/img/com.kamilbilge.supercloner3d.icon.2022-06-07-21-02-53.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 124049
server: nginx/1.18.0 (Ubuntu)
date: Wed, 11 Jan 2023 01:10:12 GMT
last-modified: Tue, 07 Jun 2022 13:02:53 GMT
etag: "629f4c7d-1e491"
expires: Fri, 10 Feb 2023 01:10:12 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F1j4cr3mBzfnqGLrg9gt7TaiEW8ej2SmtxlFElZAHSjk1srBCz_5kg==
age: 1333715
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 47d71bf163265666c21e2410fb568043
54a4b0f241af261f878967ce058f5885be476cc4
8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/4248d311/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8a6331ed48be29c59230b0c7360068de
22a20436f427d6b8e26eb30ed9aab51a43d389bf
72f0818ab04697fc29d331b2add584f3cd5e269446c7297300701a4666c9d95e
GET /s/player/4248d311/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49911
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 05:19:38 GMT
expires: Fri, 26 Jan 2024 05:19:38 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/css
age: 22749
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.dxx.firenow.icon.2023-01-12-21-01-21.png
200 OK 231 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.dxx.firenow.icon.2023-01-12-21-01-21.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 231 kB (231339 bytes)
Hash 7e23429b87f2e62d5fa1aaaa8462f068
0f1c6a1e35c2deed31e96e249676571056748327
efb0770abdeb8f94cbda9e996249630eba32aed71dbc2fbfada33f754a939031
GET /new_market/img/com.dxx.firenow.icon.2023-01-12-21-01-21.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 231339
server: nginx/1.18.0 (Ubuntu)
date: Thu, 12 Jan 2023 13:02:57 GMT
last-modified: Thu, 12 Jan 2023 13:01:21 GMT
etag: "63c004a1-387ab"
expires: Sat, 11 Feb 2023 13:02:57 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X6qK0d0hlbwwLHpIFBrqCyzqf2m6k4NNv3uKzgNedroVTSS2XuWlCA==
age: 1204550
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
200 OK 109 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (679)
Size 109 kB (109432 bytes)
Hash 711fcfe6f1ab52d89ab3474d437c1e48
b2f3e69e9d40b193de5e76ae13c6ad9ce0a8e537
361236d1317543e128074c35d22d65a2ba70f6ce9906b07a543e6b3c96239019
GET /s/player/4248d311/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 109432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 10:43:49 GMT
expires: Fri, 26 Jan 2024 10:43:49 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 3298
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.noorgames.joinnumbers.icon.2022-06-07-21-02-54.png
200 OK 86 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.noorgames.joinnumbers.icon.2022-06-07-21-02-54.png
IP
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 4daa07cc227093be4492efcc4a9d82cd
87c03f9005d8a2b97a26141feaa4d9800c0a1b1c
3b7172951624c06791b5371799d3fd5145abf7e8bf911b7cfa3441dc5cff0252
GET /new_market/img/com.noorgames.joinnumbers.icon.2022-06-07-21-02-54.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 85837
server: nginx/1.18.0 (Ubuntu)
date: Wed, 11 Jan 2023 07:24:01 GMT
last-modified: Tue, 07 Jun 2022 13:02:54 GMT
etag: "629f4c7e-14f4d"
expires: Fri, 10 Feb 2023 07:24:01 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6e1bDbeanF73X_Gnv7WSfYRutyTBoNjHqxmlcVpfXiEjnE--fuvULA==
age: 1311286
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 10:29:00 GMT
expires: Fri, 26 Jan 2024 10:29:00 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 4187
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js
200 OK 611 kB URL HTTP/2 www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (517)
Size 611 kB (611243 bytes)
Hash 4bafbf546e35e79d802b8e836cf03e3b
cff2ccd4542a73b82c18cdac6b3e4af01198566e
da6660452c1ebd120eb25d4c1a742e2fe20cf5ccfbd3523acb5e1d5693170d70
GET /s/player/4248d311/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 611243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 00:13:05 GMT
expires: Fri, 26 Jan 2024 00:13:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 41142
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.pandadagames.ninja.global.icon.2022-12-19-09-11-06.png
200 OK 103 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.pandadagames.ninja.global.icon.2022-12-19-09-11-06.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 103 kB (103069 bytes)
Hash 96d6b6058333d58cbbd3c36788b82c7d
842081b0f5db1a52cca6834aa9c665bff6b0d43b
32f9a59ec23d9282ff95130c00d17a6eb778627bfc5f4ff36c4008423b773765
GET /new_market/img/com.pandadagames.ninja.global.icon.2022-12-19-09-11-06.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 103069
server: nginx/1.18.0 (Ubuntu)
date: Wed, 18 Jan 2023 16:19:02 GMT
last-modified: Mon, 19 Dec 2022 01:11:06 GMT
etag: "639fba2a-1929d"
expires: Fri, 17 Feb 2023 16:19:02 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9FPhI9bE29fZK2X3rfHzo6yI1--kAEHK1mpspmw7m21nVp6FjfeuZg==
age: 674385
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.lilithgames.xgame.gp.icon.2022-06-07-21-03-03.png
200 OK 85 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.lilithgames.xgame.gp.icon.2022-06-07-21-03-03.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2021:04:09 18:25:35], baseline, precision 8, 512x512, components 3\012- data
Hash 7235d993c1d9b72eb73081af871b9568
b9a2245e5e41491bcbb11add48c5074eb7e59a24
a9e873b5aa42f24e97b8e5900110c7a262d8c94001b06b0b1b00df7f0e43ac4e
GET /new_market/img/com.lilithgames.xgame.gp.icon.2022-06-07-21-03-03.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 85315
server: nginx/1.18.0 (Ubuntu)
date: Thu, 12 Jan 2023 00:32:30 GMT
last-modified: Tue, 07 Jun 2022 13:03:03 GMT
etag: "629f4c87-14d43"
expires: Sat, 11 Feb 2023 00:32:30 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KVMRoVhcj-b-_XhiRptylOOxqVlZxnFHrkUmLo59DeMQpLOeGzUzvg==
age: 1249577
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.noorgames.basketbattle.icon.2022-06-29-22-44-52.png
200 OK 202 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.noorgames.basketbattle.icon.2022-06-29-22-44-52.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 202 kB (201850 bytes)
Hash 0cae588ca20cb23922c3a4c765096518
bcb805b1e21288b8e1604ba01591af76356e68b2
4db9b7b9f12ec273bf994d74191269669b73dc4ce3b47d69822de4bf1663d7ca
GET /new_market/img/com.noorgames.basketbattle.icon.2022-06-29-22-44-52.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 201850
server: nginx/1.18.0 (Ubuntu)
date: Wed, 04 Jan 2023 02:00:14 GMT
last-modified: Wed, 29 Jun 2022 14:44:52 GMT
etag: "62bc6564-3147a"
expires: Fri, 03 Feb 2023 02:00:14 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nxVcjWHxsXn-bXtY9i1W8SumyeooSdYwS3f495NqneGjDae9YHte5w==
age: 1935512
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.xd.craft.parkour.icon.2022-06-21-09-11-53.png
200 OK 264 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.xd.craft.parkour.icon.2022-06-21-09-11-53.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 264 kB (264033 bytes)
Hash 16fa235a6e7dc722987b58b5fe635ad5
5e21281b76a089834120b9a3f3a87ea28b66b37d
089748da08cb2e751be59a749834016a72f5db4b83dd73352665aecfa83e82fa
GET /new_market/img/com.xd.craft.parkour.icon.2022-06-21-09-11-53.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 264033
server: nginx/1.18.0 (Ubuntu)
date: Wed, 04 Jan 2023 18:26:58 GMT
last-modified: Tue, 21 Jun 2022 01:11:53 GMT
etag: "62b11ad9-40761"
expires: Fri, 03 Feb 2023 18:26:58 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nTkZDSjXTTJ-LLFV_QXh2taOzN37qFw5X9PZ-lUDd2hSUxWiDxKpJw==
age: 1876309
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.playgendary.kickthebuddy.icon.2023-01-18-21-01-36.png
200 OK 294 kB URL HTTP/2 dl.memuplay.com/new_market/img/com.playgendary.kickthebuddy.icon.2023-01-18-21-01-36.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Size 294 kB (294080 bytes)
Hash 6dfd72dd4b73a251b17b27153cf99812
e9339b64d709996cb8afde2ba5527a582ab85576
80ad25dbe6b2512bfafca84536df2d9d03cbf2039aee1c004687bc8b9374cbbf
GET /new_market/img/com.playgendary.kickthebuddy.icon.2023-01-18-21-01-36.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 294080
server: nginx/1.18.0 (Ubuntu)
date: Wed, 18 Jan 2023 13:24:52 GMT
last-modified: Wed, 18 Jan 2023 13:01:36 GMT
etag: "63c7edb0-47cc0"
expires: Fri, 17 Feb 2023 13:24:52 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UPtG6jGT5SxqbJ1BHUH6NVq-wxTj1oeF1s15TmLFdftRtotfjVzqGw==
age: 684835
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc3.2021-03-22-10-13-23.jpg
200 OK 290 kB URL HTTP/2 dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc3.2021-03-22-10-13-23.jpg
IP
File type PNG image data, 551 x 310, 8-bit/color RGB, non-interlaced\012- data
Size 290 kB (289900 bytes)
Hash febdb02fcc523e379f0b881d7ed51c49
756a0a0f02edd1b1f92994bdb27b0ed271685db3
f35df61cb098f7309f97602a52b6a9557aa6ca4873912b98cd46647c797d0e5b
GET /new_market/img/fantasy.survival.game.rpg.sc3.2021-03-22-10-13-23.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 289900
server: nginx/1.18.0 (Ubuntu)
date: Mon, 23 Jan 2023 19:48:45 GMT
last-modified: Mon, 22 Mar 2021 02:13:25 GMT
etag: "6057fd45-46c6c"
expires: Wed, 22 Feb 2023 19:48:45 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -p0IlUrDE4APTQuuAfxWuzJ0yulwehohKqtVfGmUyBav-f3ekm7pUQ==
age: 229802
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e7fdf1ab4be9ee80518d0400683f0d3
dd2ec6511ba05e7fb89d32a1ad407db5eaa1520b
eb789178a0b528aad87a5bf0d05aecd45e7623ebaf198820f9310887757e1d5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.memuplay.com/home/Public/img/shortlogo.png
200 OK 3.9 kB URL HTTP/1.1 www.memuplay.com/home/Public/img/shortlogo.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash f9a107accaa1b5d8a1bc53caf48def6a
c539b2cef7544b08956ab0f09beb633ab84fbc82
99e9385f6bfe61f68776a3603e306964b3045ce1bd47d444c96895c9bfa5dd73
GET /home/Public/img/shortlogo.png HTTP/1.1
Host: www.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.memuplay.com/how-to-play-fantasy.survival.game.rpg-on-pc.html
Cookie: _ga_44963QLX2Y=GS1.1.1674733125.1.0.1674733125.60.0.0; _ga=GA1.1.1621371232.1674733125
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3872
Connection: keep-alive
Expires: Sat, 25 Feb 2023 06:41:41 GMT
Date: Thu, 26 Jan 2023 06:41:41 GMT
Server: nginx/1.10.3 (Ubuntu)
Last-Modified: Fri, 04 Jan 2019 03:04:07 GMT
ETag: "5c2ecd27-f20"
Cache-Control: max-age=2592000
Accept-Ranges: bytes
X-Ser: BC107_US-DistColumbia-washingtonDC-1-cache-1, BC228_GB-london-london-3-cache-2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 21:48:03 GMT
expires: Fri, 19 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 568244
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 16:40:43 GMT
expires: Fri, 19 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 586684
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fdded3d5e68d5358634880be3d3f2d04
6a02176ed7735b46393d51bd142e0deace6a5007
7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 10:41:40 GMT
age: 3427
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1&z=818476014
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1&z=818476014
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1&z=818476014 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 26 Jan 2023 11:38:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4879)
Hash 688c643f5aed7e5142e3e87c6b55bd44
82f4d7139b9975201903cabe66c2c5ca994c802d
35d6e941e003de1b35c1db3b8140be45de94da20dac32fe2ffa8d378dce46e80
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 26 Jan 2023 11:38:47 GMT
expires: Thu, 26 Jan 2023 11:38:47 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17785744569636546167
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49759
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6535ae9529ced8e4fe9cab67dbfbcd06
cd8a01acf3cc5ba2797073d284f5d2f03965ea23
ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 810bf2bf9f302d0a65b1e0b447b549ef
d6ddcc1e64a1392f5942c0fc45864a282a93854e
f61096b63e6f62872d6d30aac7671c72403bba82f4f5c555add8e0997675f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17505
Expires: Thu, 26 Jan 2023 16:30:32 GMT
Date: Thu, 26 Jan 2023 11:38:47 GMT
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=1621371232.1674733125&jid=1684924862&gjid=1494432903&_gid=4583871.1674733126&_u=YADAAUAAAAAAACAAI~&z=344947084
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=1621371232.1674733125&jid=1684924862&gjid=1494432903&_gid=4583871.1674733126&_u=YADAAUAAAAAAACAAI~&z=344947084
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-75186244-1&cid=1621371232.1674733125&jid=1684924862&gjid=1494432903&_gid=4583871.1674733126&_u=YADAAUAAAAAAACAAI~&z=344947084 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.memuplay.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 26 Jan 2023 11:38:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230124/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230124/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20230124/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:54:17 GMT
expires: Thu, 09 Feb 2023 03:54:17 GMT
cache-control: public, max-age=1209600
age: 27870
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 190a3bc280ae77bcdd9d5404a4827845
7a87ca451b0fa21d44faace1c2ddbb4dede06133
95988c13b98d7164f7bf530e59b411a3ba26eab34bfb0898191e96ee29704ab0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-44963QLX2Y&cid=1621371232.1674733125>m=2oe1p0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: http://www.memuplay.com
date: Thu, 26 Jan 2023 11:38:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-44963QLX2Y>m=2oe1p0&_p=1097686208&_gaz=1&cid=1621371232.1674733125&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674733125&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-fantasy.survival.game.rpg-on-pc.html&dt=Download%20Grim%20Soul%3A%20Dark%20Fantasy%20Survival%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-44963QLX2Y>m=2oe1p0&_p=1097686208&_gaz=1&cid=1621371232.1674733125&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674733125&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-fantasy.survival.game.rpg-on-pc.html&dt=Download%20Grim%20Soul%3A%20Dark%20Fantasy%20Survival%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-44963QLX2Y>m=2oe1p0&_p=1097686208&_gaz=1&cid=1621371232.1674733125&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674733125&sct=1&seg=0&dl=http%3A%2F%2Fwww.memuplay.com%2Fhow-to-play-fantasy.survival.game.rpg-on-pc.html&dt=Download%20Grim%20Soul%3A%20Dark%20Fantasy%20Survival%20on%20PC%20with%20MEmu&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.memuplay.com
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.memuplay.com
date: Thu, 26 Jan 2023 11:38:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e42c4bc3eb1dde3e47013119de155096
ee735e961b5844018da0625bfd2476ab70500926
689f2b20a0cac8f0b3ad9fcc34ffb152ab8e935a0fb322d8e9fcb21f1a0ae151
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 11:27:52 GMT
expires: Thu, 26 Jan 2023 11:42:52 GMT
cache-control: public, max-age=900
age: 656
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e42c4bc3eb1dde3e47013119de155096
ee735e961b5844018da0625bfd2476ab70500926
689f2b20a0cac8f0b3ad9fcc34ffb152ab8e935a0fb322d8e9fcb21f1a0ae151
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lTr7OKHkLlsEzpLNNwBCVg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: asYiICyv8klf8QNY9Cy8Y+Topk0=
adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:48 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:48 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad49c55efa0c0770e45d7ef3f9655505
73e4c458b5f3868ffc9e531213025f6e64c05e22
15bf23fcfa89c3a7a6577af8ef7eaab37bcc400bb3c6bd8aa8607c639616132d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1005c9e99dc8d4390861d6730c7a403b
0e3858ae26a1c01e0160e3b60e400bea202ebd05
4ff7ceb81a3dad4fefd3a15ece4ce13898624c01bf5a0cb4fdd90958978ed6b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693
200 OK 253 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693
IP
File type ASCII text, with very long lines (391), with no line terminators
Hash f56eb117fad9161f720749f961a7052b
48d412f5e47b2c1765438bf19fe37b25b53d7271
3e5b61d77a6eb70ebc926948ff718250c9c3912e6fe50867aa1a61e4045b7974
GET /gampad/cookie.js?domain=www.memuplay.com&callback=_gfp_s_&client=ca-pub-4201334306964693 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:48 GMT
server: cafe
cache-control: private
content-length: 253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 26 Jan 2023 11:38:48 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e53b1d8b1f244c97e073382328e5c650
d1933a186c3b5351a8539f18e3f4f74237aefccc
2b3e14ffcd8e42c946fc8a66a44a97e543849ac1fd3fdefd85f774c86839716e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
IP
File type ASCII text, with very long lines (36171)
Hash a13a76dd17af226d4a24bd16ef702377
c364171cd0f66eb4a1a8dde04e1e083154d81dbd
1dd3352cbdb7561b142954006a2bb94008486c22760c3d5ebb1b6fffeb325173
GET /js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14250
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Jan 2023 10:46:52 GMT
expires: Sun, 21 Jan 2024 10:46:52 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
age: 435116
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d6124e1e5ecf62da00f3073e6f2e519d
7ec1fbed42c31085357390681740af77f5a43a5c
6502e2d26bb385af1ef95c3ddb76069a3ee64c8822e1fa1e6f9e308bf804644a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:48 GMT
server: ESF
cache-control: private
content-length: 30746
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad49c55efa0c0770e45d7ef3f9655505
73e4c458b5f3868ffc9e531213025f6e64c05e22
15bf23fcfa89c3a7a6577af8ef7eaab37bcc400bb3c6bd8aa8607c639616132d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 215f16014778a0ef8fe0ae045469592c
8eb2bb842d2cbe49b94309d7297309a61c837ccb
df25507f0dd6bcb47ee79846962171e9a0660f6a356f941b8cb7a5cd3bdf2762
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/L3Bfh6_kQqc/sddefault.webp
200 OK 22 kB URL HTTP/2 i.ytimg.com/vi_webp/L3Bfh6_kQqc/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 734baa1bc3e7f346f15a652307a0d71c
8a0990f795541d74dda1e8ee731d8a1be3987cfd
f832e070224995910047a9ef850a0fbc8c73bfd94944007edf855b3c92704456
GET /vi_webp/L3Bfh6_kQqc/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 21900
date: Thu, 26 Jan 2023 11:38:48 GMT
expires: Thu, 26 Jan 2023 13:38:48 GMT
cache-control: public, max-age=7200
etag: "1581076530"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 126e9ccbe4e6508bc0a881d69e0c9521
1909837ca688bdf3f91df41f5194cf248fb17812
b3143a6cce962235dd70bf5673ba4c1482d825e83ba6c01f4047fbc6ccc67874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 93af086c11908f25c43c0bd730ca1fd1
75f2cbb9c6d8aeb54145293cafa5404cc3489389
7169b0c49ea8e410f5ec7fb0fd01d0df35251e52057612bfcdff4b88e81b12f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AL5GRJXbXPl1TlHhXTz72fmFjNEFfUo7r7qJpTZzXXMU9w=s68-c-k-c0x00ffffff-no-rj
200 OK 4.3 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJXbXPl1TlHhXTz72fmFjNEFfUo7r7qJpTZzXXMU9w=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash d164f783a3bdf082ba16b24ba8318247
dbc83cd728ec72e8039fe86bba43ce3d4cf445e4
fbba345b7ab8c8c236d576c48d791b02d46a2d90009fc9fcc6f7393c482b807e
GET /ytc/AL5GRJXbXPl1TlHhXTz72fmFjNEFfUo7r7qJpTZzXXMU9w=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4300
x-xss-protection: 0
date: Thu, 26 Jan 2023 10:24:32 GMT
expires: Mon, 23 Jan 2023 12:56:18 GMT
cache-control: public, max-age=86400, no-transform
age: 4456
etag: "v14b"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 93af086c11908f25c43c0bd730ca1fd1
75f2cbb9c6d8aeb54145293cafa5404cc3489389
7169b0c49ea8e410f5ec7fb0fd01d0df35251e52057612bfcdff4b88e81b12f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 7778904c22f74343daf241d32bca0334
08a1a6c43c200f524768141f9976ac6e2aea1371
6200327e421e111e063bcd4d54828b3c7eea0ebf8c322ffaee857785f620ebcd
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:48 GMT
server: ESF
cache-control: private
content-length: 30690
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 92904e34bbb167a9a6b1e7a052f3660a
3c76dd786c27c062f603e7c3fcab253e5d558368
f62dae5ccb09d738958b6af5418e5745b35cf3e80a312637c736cd1a97d772f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1506)
Hash c8e19ab58d75eb01fd735f016f55201f
e3d257ad917d19ae463c29907f36e31e856cad37
52207b7bc66270e84d6bb6c05c6d5a2d2b0d511138073a3d3fe15d7c08119932
GET /pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7523
x-xss-protection: 0
date: Wed, 25 Jan 2023 20:39:52 GMT
expires: Wed, 08 Feb 2023 20:39:52 GMT
cache-control: public, max-age=1209600
age: 53937
etag: 641023367890010850
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 49 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3504)
Hash eaf26b8f5900d361a5d447ea72df4752
26b0a44ca382082dde8648abd0a4d949bdf0c664
1334af0b91c26ce21cb75ab69d0c7e9c8ec1f00c0ce946a3689bb9d6fdcc4d37
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 49065
date: Thu, 26 Jan 2023 11:38:49 GMT
expires: Thu, 26 Jan 2023 11:38:49 GMT
cache-control: private, max-age=3000
etag: "1674650782302584"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 42fd2c82d595ae01df2d203113dcf0a5
744da4730ec196f4ed5685002f38efc75c694f21
4a6e33e8052c5300879c4a9f4cbbfb4612e90d5232caa26cfd9883ee9797064e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1789
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 11:09:00 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:49 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1187860
expires: Tue, 16 Jan 2024 11:38:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jhikd6NRwFTAtA0W8mx6ppGLPzNGIFu58%2BdvKMBP4aYNFds%2BJAOWYL6U8ldQDxteVOa2ppXIpWNcGXHKGiYsXtr5X37hQWgvSHtBCDcc8Cd3gwcTFqwOjcweHzSlgkz4j17rpiGv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78f8f6ea4dccb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6daf7fca97f3a987cc96c0d37fd8d4a0
8b24dbdbc3aab8e5197b093800c80aa624717c93
4d21133924c561e7ac910ca2eb0fd7393ea72a56ec8d3a5c98b4d67f4c9a89d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2492
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 10:57:17 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kufnDbOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBIZtJj2tyMgrlFw9ex994AEgAACg5BUVVCQWdZQkFnRUJBZw&wp=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg
200 OK 0 B URL HTTP/2 rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kufnDbOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBIZtJj2tyMgrlFw9ex994AEgAACg5BUVVCQWdZQkFnRUJBZw&wp=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kufnDbOzWfoFmAKdg2ICAgAAALNIxttonJ0C-fUpyhBIZtJj2tyMgrlFw9ex994AEgAACg5BUVVCQWdZQkFnRUJBZw&wp=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg HTTP/1.1
Host: rtb.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 228156
date: Thu, 26 Jan 2023 11:38:48 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7021
Expires: Thu, 26 Jan 2023 13:35:50 GMT
Date: Thu, 26 Jan 2023 11:38:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7021
Expires: Thu, 26 Jan 2023 13:35:50 GMT
Date: Thu, 26 Jan 2023 11:38:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7021
Expires: Thu, 26 Jan 2023 13:35:50 GMT
Date: Thu, 26 Jan 2023 11:38:49 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 7a9d8afdc2039e3c57f2978289bc61f8
6a8bacef90357fbe21dce445a5551e861ccec8db
fd8a85970e5e9a2705e30e9879eb66509f29cc450ae0e183e802438da2c74186
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 704
Cache-Control: max-age=111492
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Etag: "63d1740e-139"
Expires: Fri, 27 Jan 2023 18:37:01 GMT
Last-Modified: Wed, 25 Jan 2023 18:25:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 7a9d8afdc2039e3c57f2978289bc61f8
6a8bacef90357fbe21dce445a5551e861ccec8db
fd8a85970e5e9a2705e30e9879eb66509f29cc450ae0e183e802438da2c74186
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 704
Cache-Control: max-age=111492
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Etag: "63d1740e-139"
Expires: Fri, 27 Jan 2023 18:37:01 GMT
Last-Modified: Wed, 25 Jan 2023 18:25:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:49 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 653bf5a34e9f99c9eef73a21d98d792f
c70d46aa2210c4f7c397fa20e1225b7d0734ac35
9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: 77d12b56-c121-4d0a-9831-9de4151b65de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUY8_GVUIAMFmgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a1ec-523a2d8b1028a4496a211030;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i_OHKx9OPaP8_2ydfgZwY4Dvbq208pXR2hwFTdUySwjsIwEIcv-M4g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:18 GMT
age: 49771
etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 49749
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Q-kz6GkBHp82E__crWSeqbfxme8c9y1BAAq3TW8NlwJy4eSy7gy7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:07 GMT
age: 49782
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 805711aaab303931f8966bbf73aeda52
2bd02a45c8b407e36a41a482b121ea3e14f7c722
66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3411
x-amzn-requestid: 62afd364-e94f-45ff-ba6c-9b589fc53e5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EyCEzrIAMFb8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4d9-203f51040f82f12d535446c4;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Ke5d5WguVrF_Phnhu9ojzN5Md0VkYnFfxKNoh5HHrmHwPI90IAIdA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 10:38:20 GMT
age: 3629
etag: "2bd02a45c8b407e36a41a482b121ea3e14f7c722"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e013ee2e3a5287de55de4c2437a279d
f2b0a5738ec9e3b178b2bf5513de3e604b86eadf
f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8648
x-amzn-requestid: 19beb9c1-4e85-47ba-9275-7fb5d25f055f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYMlENLoAMFhIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0b6-016533de5b42b3a573a66c78;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jkExt4JNW6KtzDm8mDdb-AvXWXeyZr14XifDN_XVzKiwFAru_1HcSA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:13 GMT
age: 49776
etag: "f2b0a5738ec9e3b178b2bf5513de3e604b86eadf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 49581
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.criteo.net/design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff
200 OK 34 kB URL HTTP/2 static.criteo.net/design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff
IP
File type Web Open Font Format, CFF, length 34384, version 1.100\012- data
Hash 6ca898ae5c32e1195b576276384b72b1
05e67b45b9e1dcc4e64f02c619978ee7297f3752
38784db79bb7cb8998e180cff575a3d42741bbdbbeda1aad281c653089b193b1
GET /design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: text/plain; charset=UTF-8
content-length: 34384
last-modified: Tue, 11 Jun 2019 14:25:37 GMT
etag: "5cffb9e1-8650"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff
200 OK 21 kB URL HTTP/2 static.criteo.net/design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff
IP
File type Web Open Font Format, TrueType, length 21444, version 1.100\012- data
Hash 20be5fdc3302b5f3d13fca2690afc5ef
1e75a45c81ca3ab4aee08f53c828f60daa21ff58
ed53eeea7846fe89ec2d53b5bf89b34ca78854854abdb469697c63509cc2e0ec
GET /design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: text/plain; charset=UTF-8
content-length: 21444
last-modified: Tue, 11 Jun 2019 14:25:37 GMT
etag: "5cffb9e1-53c4"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.memuplay.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.memuplay.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 11:38:49 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg&u=%7CuJAXjSxMQO%2FKU%2FCY52ubCyGZBfrnFfALWJ8uvxfZ0Rc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKvcLyMqWO1PNGe_PA60UgCq8vX_XFFJAfsOEhoCNabfzZ4x-gHpaf4-JxFPbHep4swo-8h2Z_ybUcmh0dbF6MCu6gTLHgKIWkjGttpGWmWxLNLS_eHcZZ_lxRqkyYgFI3iwy8vUn9HHu4V-0FDWjjKQozn9Bmr8k2WuwfJNIFd0ELWBfNpyqfpV4aZULTTL9jRcPurpYSvD97tTl99g9e2AEVKCkFtUecGxxJr1xd7wKuJHukA_OKqNCpd024-cIN5yLVP9u4CuC7sBcjWfki9V5YpJFJwQ9SpIk6rjSOD7Pm6p1RpoEXJpt-ZwkSq4WRIebUaD24qBEFXSnRTJCHP0HxOFYCH8gJFHGAkboEnpJfrvbSOqFRUsqzDiEGn0sWRu-jgjAp8HB90ocsyt9d1T1jcrCsKDohl0HyK0q29R2h2cZLe4OzRG052jCFrc16Nfl8LnM-CBLzlNE7ZJv9nOrO7H0CJabXvCd81oPTgYhgNd6Qkmw4pGFZ0EmqbSI0&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCr2NtSGbSY7rYIcuX7AODuoKQAcme0rFcjfDi1pMBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyMDEzMzQzMDY5NjQ2OTPIAQmpAn8mjTVLT7I-qAMBqgT0AU_QCamoxuleDmRm7xXtF-iOemqOj8EzExxH08QGhdvLcStQZpNyiX3dLCpbun4a_3BilBM_O40b0NdjLULeMooK-3D4Dn96ZkW9eNrvfKNv1_Dsml7ekSyGHpSZI2mGVFF4vCTxLznv-7qOPCKJ_AXD7GiVELUn2BVZyBcHRRwONmkONFfbdYCWUn4Xjm1IKWQE2fwPHPdbS7QiOEuBxvXTDdENRVMzYs1Nt38vADmyGukiVMwcaSywE2QdSb5QBwsY99ObzrWw_uObKcldT8a33wdpdMtvYaq3uZZ66KybUnwicvPAUwPt1hIoSVMAL5GQ4SKABv7X27HM1djD2wGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgBAQATICqgI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_3eD8bcUCS9tzEC4IR9AXdCMA4iKg%26client%3Dca-pub-4201334306964693%26adurl%3D
200 OK 67 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg&u=%7CuJAXjSxMQO%2FKU%2FCY52ubCyGZBfrnFfALWJ8uvxfZ0Rc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKvcLyMqWO1PNGe_PA60UgCq8vX_XFFJAfsOEhoCNabfzZ4x-gHpaf4-JxFPbHep4swo-8h2Z_ybUcmh0dbF6MCu6gTLHgKIWkjGttpGWmWxLNLS_eHcZZ_lxRqkyYgFI3iwy8vUn9HHu4V-0FDWjjKQozn9Bmr8k2WuwfJNIFd0ELWBfNpyqfpV4aZULTTL9jRcPurpYSvD97tTl99g9e2AEVKCkFtUecGxxJr1xd7wKuJHukA_OKqNCpd024-cIN5yLVP9u4CuC7sBcjWfki9V5YpJFJwQ9SpIk6rjSOD7Pm6p1RpoEXJpt-ZwkSq4WRIebUaD24qBEFXSnRTJCHP0HxOFYCH8gJFHGAkboEnpJfrvbSOqFRUsqzDiEGn0sWRu-jgjAp8HB90ocsyt9d1T1jcrCsKDohl0HyK0q29R2h2cZLe4OzRG052jCFrc16Nfl8LnM-CBLzlNE7ZJv9nOrO7H0CJabXvCd81oPTgYhgNd6Qkmw4pGFZ0EmqbSI0&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCr2NtSGbSY7rYIcuX7AODuoKQAcme0rFcjfDi1pMBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyMDEzMzQzMDY5NjQ2OTPIAQmpAn8mjTVLT7I-qAMBqgT0AU_QCamoxuleDmRm7xXtF-iOemqOj8EzExxH08QGhdvLcStQZpNyiX3dLCpbun4a_3BilBM_O40b0NdjLULeMooK-3D4Dn96ZkW9eNrvfKNv1_Dsml7ekSyGHpSZI2mGVFF4vCTxLznv-7qOPCKJ_AXD7GiVELUn2BVZyBcHRRwONmkONFfbdYCWUn4Xjm1IKWQE2fwPHPdbS7QiOEuBxvXTDdENRVMzYs1Nt38vADmyGukiVMwcaSywE2QdSb5QBwsY99ObzrWw_uObKcldT8a33wdpdMtvYaq3uZZ66KybUnwicvPAUwPt1hIoSVMAL5GQ4SKABv7X27HM1djD2wGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgBAQATICqgI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_3eD8bcUCS9tzEC4IR9AXdCMA4iKg%26client%3Dca-pub-4201334306964693%26adurl%3D
IP
Hash 1b45576432ed20a6b42f87e5873cedde
f708f92e5d0c37aa2f7457c2321073dd60c2d6a2
3e874ae4f12b8de8ef5c4415b626e5d593c3882c1c0cdcbbeac0a264f4584243
GET /delivery/r/afr.php?z=Y9JmSAAIbDoKewvLAACdA-PFljqf-ithKOg5Zg&u=%7CuJAXjSxMQO%2FKU%2FCY52ubCyGZBfrnFfALWJ8uvxfZ0Rc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKvcLyMqWO1PNGe_PA60UgCq8vX_XFFJAfsOEhoCNabfzZ4x-gHpaf4-JxFPbHep4swo-8h2Z_ybUcmh0dbF6MCu6gTLHgKIWkjGttpGWmWxLNLS_eHcZZ_lxRqkyYgFI3iwy8vUn9HHu4V-0FDWjjKQozn9Bmr8k2WuwfJNIFd0ELWBfNpyqfpV4aZULTTL9jRcPurpYSvD97tTl99g9e2AEVKCkFtUecGxxJr1xd7wKuJHukA_OKqNCpd024-cIN5yLVP9u4CuC7sBcjWfki9V5YpJFJwQ9SpIk6rjSOD7Pm6p1RpoEXJpt-ZwkSq4WRIebUaD24qBEFXSnRTJCHP0HxOFYCH8gJFHGAkboEnpJfrvbSOqFRUsqzDiEGn0sWRu-jgjAp8HB90ocsyt9d1T1jcrCsKDohl0HyK0q29R2h2cZLe4OzRG052jCFrc16Nfl8LnM-CBLzlNE7ZJv9nOrO7H0CJabXvCd81oPTgYhgNd6Qkmw4pGFZ0EmqbSI0&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCr2NtSGbSY7rYIcuX7AODuoKQAcme0rFcjfDi1pMBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyMDEzMzQzMDY5NjQ2OTPIAQmpAn8mjTVLT7I-qAMBqgT0AU_QCamoxuleDmRm7xXtF-iOemqOj8EzExxH08QGhdvLcStQZpNyiX3dLCpbun4a_3BilBM_O40b0NdjLULeMooK-3D4Dn96ZkW9eNrvfKNv1_Dsml7ekSyGHpSZI2mGVFF4vCTxLznv-7qOPCKJ_AXD7GiVELUn2BVZyBcHRRwONmkONFfbdYCWUn4Xjm1IKWQE2fwPHPdbS7QiOEuBxvXTDdENRVMzYs1Nt38vADmyGukiVMwcaSywE2QdSb5QBwsY99ObzrWw_uObKcldT8a33wdpdMtvYaq3uZZ66KybUnwicvPAUwPt1hIoSVMAL5GQ4SKABv7X27HM1djD2wGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgBAQATICqgI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_3eD8bcUCS9tzEC4IR9AXdCMA4iKg%26client%3Dca-pub-4201334306964693%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 11:38:48 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 103801208
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 350
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 11:32:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 350
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 11:32:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 353
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 11:32:56 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 350
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 11:32:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 4325fd3476e0a535879184b2ddcaff13
807fa87e6dd7ee1933062736e88c43858d016983
91eeece33e9735a13dad3fcfd8d71c274ed4cc3c6a1392ef84858b295643d320
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5381
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 11:38:49 GMT
Last-Modified: Thu, 26 Jan 2023 10:09:08 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
pix.eu.criteo.net/img/img?h=556&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F151104%2F8b2c93c3b97d47dda0294650326e6c27_fluevog.png&v=3&w=196&s=8NHiLKv8Md3MYtAjz-f3IjYn
200 OK 31 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=556&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F151104%2F8b2c93c3b97d47dda0294650326e6c27_fluevog.png&v=3&w=196&s=8NHiLKv8Md3MYtAjz-f3IjYn
IP
File type PNG image data, 196 x 186, 8-bit/color RGBA, non-interlaced\012- data
Hash bafe427038e32311e25f71367cd745cc
9e58a232d3315d0f8d80d5dbebc8e7fe278f6511
78c5eae1ef5ba20f73f0008257a4dfa312a4909f5d0a7dd3d6333d4867108b09
GET /img/img?h=556&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F151104%2F8b2c93c3b97d47dda0294650326e6c27_fluevog.png&v=3&w=196&s=8NHiLKv8Md3MYtAjz-f3IjYn HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=29107637
expires: Fri, 29 Dec 2023 09:06:07 GMT
date: Thu, 26 Jan 2023 11:38:49 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 31123
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=800
200 OK 60 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x706, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b89c0359db149cca0d760d48b9d114b0
f0f484e0ad714165e9684d049313d94eef287a53
fb151f1ba8761e78c9fdbecad7c8dea9166a618aa3755957ef219fe876f3e030
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=800 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1106838
expires: Wed, 08 Feb 2023 07:06:08 GMT
date: Thu, 26 Jan 2023 11:38:49 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 60042
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=800
200 OK 38 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x576, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6d3cefd5e9bea0b69483b8fe193244a7
0f0f659b04d6524c16074dc35c8ce002e8cbde81
1d317daca1a34fa9369c31d37dc6b526600e4a2961f48d77a5a6ec9b139784a2
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=800 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2573201
expires: Sat, 25 Feb 2023 06:25:31 GMT
date: Thu, 26 Jan 2023 11:38:48 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 37522
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=800
200 OK 36 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x586, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8e0b295333afa3c1265ca89335de1e00
ac8735e77b0d7db382e0ca24acbfa6b49f8ec321
d9e89dbec70416d17d50fbd9dc590e92d97788447c3fba2660a4ce0f9f249aa0
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=800 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=345044
expires: Mon, 30 Jan 2023 11:29:34 GMT
date: Thu, 26 Jan 2023 11:38:49 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 35948
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 11:38:49 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 947 B URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1397)
Hash fbfc432630ade396cef4b2ebd6c931ea
579b9155027a4c95fee33001d6e2cc209feab4c4
0cc5ac7cd37e8ea85f549c8c648c1505385554a69c8457f286301825545b1789
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=pKGNoR9y-cIG65O0pbLAlmsNKTpVeaP2M2CXdQxi0pTUuK2ega-aaWElCQBWgnrs390r1ESHil_p3RQotAeecUQrEu3tFOAANWVziJ8K4NFBst9ScYc17gyMRPBkld62_pyctbeYj_u6zO40YlSlDRhzIBwVEMgPB1qgdq1lKwT-CsYV6E6llU2Mrph7Js2zO3KufMIl9Tp_31DMKWtRjnoRJz3GkAD4UISHZrKpTax44p5Ld8Zg8f6LAlgd7b4tlDE96Q&sds=2&rev=84429&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 11:38:51 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 0 B URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=egmvW__tgtRZSadEdVDr8Gxc-Pqn1M1ymXqFk68hFoLv3kotwJ9D6XEhBuGyYEg9LYtVhEvRhlGMCB5-9KYMihL7IoJXVLOfrA_cF_El3KaW8iWOMrP_LrxsMzRLfshbvfmxLba7MehKpF1s7Qk5nO86p350Zgs8tj5T8sS-R39zsOQVxFv0zD9_Qtg4F3zOFfXKtx_Lis4VkSRlwD9K4H6LMRnnPju27rPooZKp_SXj_89iN_vcoV-8nqvWKr_MZWsLE0BUsAxhZ5iZYZZu0Lan_uJx-zvXyobrGX4QUrSE_y-dyT00aMoDcAvMaCj4_XCWi0dKy0mHKVJNo-DDhymM0HYn_R7eofJFC9Su_uNmIkAKG6jVIwe1GYoa6S0oQmbAplRLF2vy2GGv3QVX-RZFZdnZrWjYOoMDU5WQx8XCWgoY
200 OK 0 B URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=egmvW__tgtRZSadEdVDr8Gxc-Pqn1M1ymXqFk68hFoLv3kotwJ9D6XEhBuGyYEg9LYtVhEvRhlGMCB5-9KYMihL7IoJXVLOfrA_cF_El3KaW8iWOMrP_LrxsMzRLfshbvfmxLba7MehKpF1s7Qk5nO86p350Zgs8tj5T8sS-R39zsOQVxFv0zD9_Qtg4F3zOFfXKtx_Lis4VkSRlwD9K4H6LMRnnPju27rPooZKp_SXj_89iN_vcoV-8nqvWKr_MZWsLE0BUsAxhZ5iZYZZu0Lan_uJx-zvXyobrGX4QUrSE_y-dyT00aMoDcAvMaCj4_XCWi0dKy0mHKVJNo-DDhymM0HYn_R7eofJFC9Su_uNmIkAKG6jVIwe1GYoa6S0oQmbAplRLF2vy2GGv3QVX-RZFZdnZrWjYOoMDU5WQx8XCWgoY
IP
GET /delivery/lg.php?cppv=3&cpp=egmvW__tgtRZSadEdVDr8Gxc-Pqn1M1ymXqFk68hFoLv3kotwJ9D6XEhBuGyYEg9LYtVhEvRhlGMCB5-9KYMihL7IoJXVLOfrA_cF_El3KaW8iWOMrP_LrxsMzRLfshbvfmxLba7MehKpF1s7Qk5nO86p350Zgs8tj5T8sS-R39zsOQVxFv0zD9_Qtg4F3zOFfXKtx_Lis4VkSRlwD9K4H6LMRnnPju27rPooZKp_SXj_89iN_vcoV-8nqvWKr_MZWsLE0BUsAxhZ5iZYZZu0Lan_uJx-zvXyobrGX4QUrSE_y-dyT00aMoDcAvMaCj4_XCWi0dKy0mHKVJNo-DDhymM0HYn_R7eofJFC9Su_uNmIkAKG6jVIwe1GYoa6S0oQmbAplRLF2vy2GGv3QVX-RZFZdnZrWjYOoMDU5WQx8XCWgoY HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 11:38:48 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2965970
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0
IP
GET /embed/L3Bfh6_kQqc?ps=play&vq=large&rel=0&autohide=1&showinfo=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Jan 2023 11:38:47 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=0de7p5x5QiE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TWpreU5EQXhNREl5TWpnM056UTRNUT09EMfMyZ4GGMfMyZ4G; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 11:38:47 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=RabbQB8wh6A; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 11:38:47 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+200; expires=Sat, 25-Jan-2025 11:38:47 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc2.2021-03-22-10-13-23.jpg
200 OK 0 B URL HTTP/2 dl.memuplay.com/new_market/img/fantasy.survival.game.rpg.sc2.2021-03-22-10-13-23.jpg
IP
GET /new_market/img/fantasy.survival.game.rpg.sc2.2021-03-22-10-13-23.jpg HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 377016
server: nginx/1.18.0 (Ubuntu)
date: Mon, 16 Jan 2023 19:50:36 GMT
last-modified: Mon, 22 Mar 2021 02:13:25 GMT
etag: "6057fd45-5c0b8"
expires: Wed, 15 Feb 2023 19:50:36 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: idGcnKhcUzHE8ri-aB4Xau3uFJjvUOaL-A71OoxIMb7kUP_63QY09Q==
age: 834491
X-Firefox-Spdy: h2
dl.memuplay.com/new_market/img/com.joycity.heroball.icon.2022-06-29-09-29-53.png
200 OK 0 B URL HTTP/2 dl.memuplay.com/new_market/img/com.joycity.heroball.icon.2022-06-29-09-29-53.png
IP
GET /new_market/img/com.joycity.heroball.icon.2022-06-29-09-29-53.png HTTP/1.1
Host: dl.memuplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.memuplay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 357274
server: nginx/1.18.0 (Ubuntu)
date: Tue, 17 Jan 2023 10:55:07 GMT
last-modified: Wed, 29 Jun 2022 01:29:53 GMT
etag: "62bbab11-5739a"
expires: Thu, 16 Feb 2023 10:55:07 GMT
cache-control: max-age=2592000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -TpfmjVQp348japVy-NqxI2OqyLh0qS6srrbBa03xsPaf569ZggpIA==
age: 780220
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/adchoices_en.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/adchoices_en.svg
IP
GET /flash/icon/adchoices_en.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 11:38:49 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:27:58 GMT
etag: W/"5e42b9ee-759"
expires: Sun, 21 Jan 2024 11:38:49 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
104.166.160.228
209.85.233.156
95.101.11.115
178.250.2.129
104.17.25.14