game-2u.com/wp-content/uploads/2023/03/The-Curse-of-Kubel-Deluxe-Edition-GOG-PC.jpg
200 OK 10 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/03/The-Curse-of-Kubel-Deluxe-Edition-GOG-PC.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 241x339, components 3\012- data
Hash f8e347ac510659c55a15bc98c1cba69a
cba14bb11c360fdd8e66f17a021f8d9cd3d8c18f
d68d48e30e0f8b8c8ceaff3c2eeaaab5df4107e9e794e450bbf4cdd8142d4967
GET /wp-content/uploads/2023/03/The-Curse-of-Kubel-Deluxe-Edition-GOG-PC.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/jpeg
content-length: 10494
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Mon, 20 Mar 2023 16:21:43 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=39aaJhxKipXkQTv%2FTdcGkOLXIPHKsJeJarRVFcQ7Q%2FCZGZ4bU%2BEWJo2%2FZZOP5QZG1kxhgCjaYxBoLHoDt%2BASbBaVwjru2Apqhewwm09ylXQte1MyI87zVGImRIjLyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b25864b4ff-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.4.1
200 OK 677 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.4.1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1845)
Hash f6a3dd4ecbf227acbafcff33d68dc71d
7421115ddcd5d436b89a1fd27e0cdce5a01978e6
30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421
GET /ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.4.1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 677
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-750"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 584643
expires: Sat, 23 Nov 2024 02:10:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xgPE2RPect67KFHv%2FbCj0UdavSaR3PJBImRsKabCk47wujtf1c0ssKq9Obsha1mQJtghpNuNpUst5u6reg9EY%2BCnXrfoYk%2BhW3u919NTpntHNUWlm%2BLqDrmWU%2FfxXhDzhQx39q6f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830082b33ff0b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png
200 OK 16 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type PNG image data, 350 x 350, 8-bit colormap, non-interlaced\012- data
Hash 134fce13c189ed0e483a1bddb6406204
eed559ac52e9731c56a1fb03eb94fc82e551bb66
723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791
GET /wp-content/plugins/chp-ads-block-detector/assets/img/icon.png HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/png
content-length: 15671
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Fri, 23 Jun 2023 21:23:35 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zppvW2Oo4fZ4wmqHMUTczVwrupFpe5MqVXfVryQCGLOIvXjYENnvYRElPK7lk%2FrtC46K4Bi4%2FfRBJXx%2FjoqsKTuMu6NIJTdsp299RIBf5MFr2%2FWfS8KvvWkwXc80hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b25869b4ff-OSL
alt-svc: h3=":443"; ma=86400
i0.wp.com/game-2u.com/wp-content/uploads/2019/07/Game2u-web.png?w=400&ssl=1
200 OK 6.2 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2019/07/Game2u-web.png?w=400&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash eaf72cc3af90419ec0aa491668f75a3e
f54ed88dd15522601d457c4d749564f733cfe0bc
e85b1bca5ed77bcc7bcb77f7a47cedac9da03da7565d61ae3b3c371daa4454f7
GET /game-2u.com/wp-content/uploads/2019/07/Game2u-web.png?w=400&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 6158
last-modified: Sun, 19 Jun 2022 07:37:36 GMT
expires: Tue, 18 Jun 2024 19:37:36 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2019/07/Game2u-web.png>; rel="canonical"
x-content-type-options: nosniff
etag: "29b31a5b8481f5b3"
vary: Accept
x-nc: HIT arn 3
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1701553557/0202fcfe/39070039.jpg?ssl=1
200 OK 32 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1701553557/0202fcfe/39070039.jpg?ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 432x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 54104bd9a71269fe62d519462dd16ee7
ce89c573d9f8fd846ca2fc0a39e1dd4db79c816d
ac9eaca474bd58dddf11622c65f87253d2074215cb8ed064d572d43c004c51cb
GET /images.vfl.ru/ii/1701553557/0202fcfe/39070039.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 31814
last-modified: Sat, 02 Dec 2023 22:00:40 GMT
expires: Tue, 02 Dec 2025 10:00:40 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1701553557/0202fcfe/39070039.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "4d73082d1ff29ddf"
vary: Accept
x-nc: HIT arn 2
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1701605642/845a8c07/39070190.jpg?ssl=1
200 OK 28 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1701605642/845a8c07/39070190.jpg?ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 432x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c386eebe9d1b1e56856d91ae6d468a20
079a18c9cbb7df11ec9fec14c9186d87e0b7a982
490c30dd032026cb96034077a04c5d4f7455d5eb62bc16f963abb67e3332e7be
GET /images.vfl.ru/ii/1701605642/845a8c07/39070190.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 28480
last-modified: Sun, 03 Dec 2023 12:22:14 GMT
expires: Wed, 03 Dec 2025 00:22:14 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1701605642/845a8c07/39070190.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a762eeaf61ccdc1d"
vary: Accept
x-nc: HIT arn 5
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1700325139/9ec170ed/39061539.jpg?ssl=1
200 OK 40 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1700325139/9ec170ed/39061539.jpg?ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 432x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5eedbfeb1e81a171f569bc2aea880dea
15efd3c35fb47ef324f053677a315bb1e1118b0a
6f2d680fc9b08ac6fa91680a143b126fba3696ac3615b0b265348bbe55c745db
GET /images.vfl.ru/ii/1700325139/9ec170ed/39061539.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 40122
last-modified: Sat, 02 Dec 2023 18:20:22 GMT
expires: Tue, 02 Dec 2025 06:20:22 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1700325139/9ec170ed/39061539.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "5fde0a69d448e3f7"
vary: Accept
x-nc: HIT arn 3
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?resize=570%2C129&ssl=1
200 OK 7.1 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?resize=570%2C129&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2a19271a79ed86157e035261d50ce8b8
bdaaab52551234d79c3420c71d72bf2004010899
11230d9a5e6db15347e2b28947e0b3128c642bf897dab51e24ab411164b61c35
GET /images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?resize=570%2C129&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 7082
last-modified: Fri, 31 Mar 2023 21:36:25 GMT
expires: Mon, 31 Mar 2025 09:36:25 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png>; rel="canonical"
x-content-type-options: nosniff
etag: "bc97642a657da821"
vary: Accept
x-nc: HIT arn 3
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.4.1
200 OK 3.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.4.1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (7862)
Hash 45bacd312d5098b4b59f563d8756c15d
fa55e2cff078381e5365d95782a95a787d0b7192
3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b
GET /ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.4.1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 3150
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-1ed1"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 328993
expires: Sat, 23 Nov 2024 02:10:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hAithtt7pSPzI79QzTluY3YbweapCo43PSlW2vTrre4FaDvyqP5mg3%2BFE3987AIPZktbcQnuKgV%2BLu6JdMfFu2YSgTzIdNXPA1%2FiJlpzhcpwYH7YMqq7Pf1h8pkPefH8Ml7qYuGt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830082b3780db4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?resize=241%2C339&ssl=1
200 OK 14 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?resize=241%2C339&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 59902e25d0dfdafbe8cefa39310a736f
c6e4c10f0959d74e62252616b54abcbc3c619ad8
c6049fca4895c5c101af68ae52759e4b2a5c64c873c9be7705ec2fca13e0ba65
GET /game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?resize=241%2C339&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/webp
content-length: 13968
last-modified: Sat, 02 Dec 2023 15:59:39 GMT
expires: Tue, 02 Dec 2025 03:59:39 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "150d31d27c646063"
vary: Accept
x-nc: MISS arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.4.1
200 OK 1.1 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.4.1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (3036)
Hash 94279a9a0c4060a96efcf1da47716f86
ea88b3fd8b01a8b86edfd0f4120cc9a834893018
d41c6733a8c4a3a7f08204de8e3d60e1d2baf17dd7f675a26830fb1047fac40a
GET /ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.4.1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 1101
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-bf7"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 587285
expires: Sat, 23 Nov 2024 02:10:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o23Phfu%2BUU%2B8EO%2Fi97VU%2F80%2BEceGWqeFWEpl9TSQujl2HkS%2Fv9rEh%2Br6wAnhVJoU2rY5kQnynWa053Pti3wdLDb%2FrYyLgNRLyvFTaacabGIhJdIu6btorLXKvIBciTtNn2CbaPFA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830082b3780eb4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
game-2u.com/wp-content/uploads/2023/03/Learning-Factory-Build-10655596-PC.jpg
200 OK 29 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/03/Learning-Factory-Build-10655596-PC.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 241x339, components 3\012- data
Hash cd61b55da092ae9ef936372c0dac5d83
c3a7fcb7f0961f362f44b40d54c1fea2e8074643
6eb99b2f9718fb3041a5c09e8460592ff6db435ee95bccc3b57ceeb6c62f8841
GET /wp-content/uploads/2023/03/Learning-Factory-Build-10655596-PC.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: image/jpeg
content-length: 29445
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 04 Mar 2023 08:56:37 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIjXlchSd62fmGbGSrfgsmGQKmjHa7J4UJI3za6IuWwmMPXiBHF5g2CAaE%2Bhi%2BGa54DCzrr0bmdBL3dGHvaG9PGZWFPOS7%2F13jSoGcMO4gykvnZmFJqT1Jkji7%2Fumg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b25863b4ff-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=UA-262573192-3
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-262573192-3
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash f0a5c877b6761400a0883c78b93042da
ce639f3d6f8055a43f72b7baa1401d8ec10634ed
8f604d008ad18e49a7ec4682ef57d2ccac6814e781184f7e2d11c2de76ab0404
GET /gtag/js?id=UA-262573192-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 02:10:01 GMT
expires: Mon, 04 Dec 2023 02:10:01 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69054
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
game-2u.com/wp-content/uploads/2019/10/a.jpg
200 OK 1.4 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2019/10/a.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x246, components 3\012- data
Hash 3ac5ad5b1d487d72e99652fb93544499
667e333e41654392ba20a19101abc2111f25dd38
5abdd1ad282db0b26db73bde8ce1375ca60bc4dbaa3bff8c070d76afd1430c7b
GET /wp-content/uploads/2019/10/a.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:01 GMT
content-type: image/jpeg
content-length: 1395
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Tue, 15 Nov 2022 18:35:21 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F6LXQF5zSLXUY6UPsbqp0nfnoFtyjJ68vFVPYHmp3QaPcahhuLC9gcpnkS%2Bc2vmz7wvyuyq%2BiCxwcc56%2FFMvmlJNyh0GRvaEfhoBuFbXQcW1Iw2sO1lGiBhOfGrdCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b7fa8ab4ff-OSL
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.jpg
200 OK 22 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x96, components 3\012- data
Hash 50a6ccb47e60769abd113604a36a8782
841d8534f4c26c18b6e82e248dee42325533024e
11ec5a03426f3043a9027fced80b462983b1c1883e696b68c2f1df864bb1d9a3
GET /wp-content/uploads/2019/07/cropped-game2u-1.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:01 GMT
content-type: image/jpeg
content-length: 21510
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Tue, 15 Nov 2022 18:35:21 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g4b7LnW%2Fgehp1gY4uWnZZpxJL9WTKJmfs9DTMQlRMXzjRdljVUj%2F1uE2n0MYqwcdJkplGQDy7dDlfeiXf4aYQfyTNOpC2dvItLBH0qp%2BgHTc3BkmilyhJ7MaesAEug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b82ab7b4ff-OSL
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/themes/poster/foundation/js/foundation.core.js
200 OK 4.8 kB URL GET HTTP/3 game-2u.com/wp-content/themes/poster/foundation/js/foundation.core.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash 0e78b1db7d662e95ae8c3506146b080a
9f1675c87a306e4dd45f84d0b7ac484ae506245e
6e79424f448b401656e2384514c9332a4baa6ab4d458ba048655e01f4b1c60f2
GET /wp-content/themes/poster/foundation/js/foundation.core.js HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cbn4MNqQcfruxdbMoje9SbJnkk%2FLlDgY8CxtcFrbCRIu4hzaoODWUCNURAQeN0tMtP%2BldhQ9axjgysJvMbC5bGcwepqZb7JjwakQ7prXkA0mJVNPhyqlV2eerDVnkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b25870b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/themes/poster/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 game-2u.com/wp-content/themes/poster/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/poster/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/wp-content/cache/wpfc-minified/lmnzjxmp/g4fzp.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:01 GMT
content-type: application/font-woff2
content-length: 77160
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2FWsayPG%2Bau0yI5xyldgrnbqaJvxhQQQqbF%2BF8O8ACN7HqdGEx1bsIBrO4wLIY9mc7vXOSmsjyPLkzI6uXusYUyqLUBDnB0aVu2nThQft2TfRFj2gP%2BO4Ex0Ma7RpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b89ae1b4ff-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-17Y9MG0KT2&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-17Y9MG0KT2&l=dataLayer&cx=c
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash ae29a13df69bce4fc00726830c4bcca8
e3527a238e2f77b4352a69b08a83398372677cf0
1c65618dfd2197380c57a230aac657351f3d8d1bfda49d5c2fb89f60595d407c
GET /gtag/js?id=G-17Y9MG0KT2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 02:10:01 GMT
expires: Mon, 04 Dec 2023 02:10:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81229
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-BDK88G3QWJ&l=dataLayer&cx=c
200 OK 77 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-BDK88G3QWJ&l=dataLayer&cx=c
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 7750dedf1b79c064740355b6c0fb1103
be4df5bea61656f6b0ccba261fd3b958df07d25b
4154dc521fd2e73b1077ca0b851aaf4a3c8e6842e1fd5503fddbc985010fcbd9
GET /gtag/js?id=G-BDK88G3QWJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 02:10:01 GMT
expires: Mon, 04 Dec 2023 02:10:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77297
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.a-ads.com/a-ads-banners/481633/728x90?region=eu-central-1
200 OK 48 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/481633/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/1024368?size=728x90
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Hash e262fc829fe8a4f2481dc0dbea930492
3fa2929095d5cafa8015d4e6b545821226986603
3adc7aec9f7a15bf05d3eb70624ebc3acb2a7b422defc27e3af462f897ebb7c5
GET /a-ads-banners/481633/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: image/gif
content-length: 47715
x-amz-id-2: X5JcbM/ZiaKHqiNV+OoyUI4120oH8CaVw3xQJblLD7oJjUv9arMWVLNZ26e1GQkkLpmB0KOe9Gg=
x-amz-request-id: FHA2SDA1V948JQX4
x-amz-replication-status: COMPLETED
last-modified: Sat, 30 Sep 2023 19:52:55 GMT
etag: "e262fc829fe8a4f2481dc0dbea930492"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: BBrwRarvbdAuE_BFgySirGfw2fP6_dGZ
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/481633/728x90?region=eu-central-1
200 OK 48 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/481633/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/1024368?size=728x90
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Hash e262fc829fe8a4f2481dc0dbea930492
3fa2929095d5cafa8015d4e6b545821226986603
3adc7aec9f7a15bf05d3eb70624ebc3acb2a7b422defc27e3af462f897ebb7c5
GET /a-ads-banners/481633/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: image/gif
content-length: 47715
x-amz-id-2: X5JcbM/ZiaKHqiNV+OoyUI4120oH8CaVw3xQJblLD7oJjUv9arMWVLNZ26e1GQkkLpmB0KOe9Gg=
x-amz-request-id: FHA2SDA1V948JQX4
x-amz-replication-status: COMPLETED
last-modified: Sat, 30 Sep 2023 19:52:55 GMT
etag: "e262fc829fe8a4f2481dc0dbea930492"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: BBrwRarvbdAuE_BFgySirGfw2fP6_dGZ
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
definedbootnervous.com/b820496cbe0f52245b6894ae62c63be0/invoke.js
200 OK 11 kB URL GET HTTP/1.1 definedbootnervous.com/b820496cbe0f52245b6894ae62c63be0/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectdefinedbootnervous.com
FingerprintBE:D4:61:7E:D3:F5:58:74:B4:39:61:F1:4C:BE:1B:44:00:B3:30:87
ValiditySat, 18 Nov 2023 06:38:59 GMT - Fri, 16 Feb 2024 06:38:58 GMT
File type exported SGML document, ASCII text, with very long lines (29641), with no line terminators
Hash 3eb0b95ce7dcf71c6b62f9f55a662ae0
868f8bc137a02a96f72ab92ae2dca0352837ce7b
74f040ccb881b198c19474f82440e72a451d80fb3413feedbc17742e7009a5a6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /b820496cbe0f52245b6894ae62c63be0/invoke.js HTTP/1.1
Host: definedbootnervous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a7fe82a49377b86040678ef6c9ad1ced
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ebc0f19a7067085e95ff0e35ee441f4d
23c3d68afd4c1c6cdecce9007aa3bddc793bc52d
6a07099ef655ed036e4a865236f8a6e5549e9a468e207691923634fc51c3186d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 04 Dec 2023 02:10:02 GMT
Last-Modified: Mon, 04 Dec 2023 01:50:06 GMT
Server: ECAcc (ska/F78B)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Rc3RtU8SaqtI_Q1mxPFCuRb2o1S4BqecTEKRvbUazO2xZI5HvU8XVA==
Age: 1196
definedbootnervous.com/ee9bf356d601332a3ace39ce6d63a346/invoke.js
200 OK 11 kB URL GET HTTP/1.1 definedbootnervous.com/ee9bf356d601332a3ace39ce6d63a346/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectdefinedbootnervous.com
FingerprintBE:D4:61:7E:D3:F5:58:74:B4:39:61:F1:4C:BE:1B:44:00:B3:30:87
ValiditySat, 18 Nov 2023 06:38:59 GMT - Fri, 16 Feb 2024 06:38:58 GMT
File type exported SGML document, ASCII text, with very long lines (29691), with no line terminators
Hash db210dcf4b1801006321a6b7a8038764
728a6a55c6f327a4a07deabde8d2394a755e7de3
6a03d6ad42ba0897a6e6660d46159d77cf529ae3d6288e2fd1e2661bd3f37048
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ee9bf356d601332a3ace39ce6d63a346/invoke.js HTTP/1.1
Host: definedbootnervous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c600aa63ae9c2c155a9cd5863130ceb0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 21c147efcfa3ce932c8a4782e209eca6
22c823840e2a2ae2fde934df5e80bd1536a8ad6d
98b693078d35a185f363d39688df8ed4c36e4e7b5809287368c404d1782f03c7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://game-2u.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9:1:1; expires=Thu, 01 Dec 2033 02:10:02 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 21c147efcfa3ce932c8a4782e209eca6
22c823840e2a2ae2fde934df5e80bd1536a8ad6d
98b693078d35a185f363d39688df8ed4c36e4e7b5809287368c404d1782f03c7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Cookie: uid_id2=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://game-2u.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/452149/336x280?region=eu-central-1
200 OK 43 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/452149/336x280?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/1134233?size=336x280
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 336 x 280\012- data
Hash 99440f993c4ceeb10c30be303503be7d
c0d2dbad7179c0fa4b704ab05da2f15e69ddf2e0
2a8941c29a2adb48173120c82bc82873aab5931333e968e3d73ff6b9beb0b049
GET /a-ads-banners/452149/336x280?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: image/gif
content-length: 42935
x-amz-id-2: cnCD3/NCFv/gEcySRKiFn2n9SKlx3b5/EL08Mcb0tLqU72uciceKUhVgsezY1FscQamLIsjGvh8=
x-amz-request-id: C9H29G0HHFMK9JJ1
x-amz-replication-status: COMPLETED
last-modified: Sat, 29 Apr 2023 12:10:47 GMT
etag: "99440f993c4ceeb10c30be303503be7d"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: czSaYk7ghyudhydZ_WNcAY6e6mNV77nm
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
game-2u.com/2023/09/celeste-v6458966-pc.html
200 OK 72 kB URL User Request GET HTTP/2 game-2u.com/2023/09/celeste-v6458966-pc.html
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11662)
Hash bb2096df8251c970beaa8bae7d0eff2c
9a9c88b7e97fa2f9234f6cf9976a6c26a2a0a72b
291e561359da5079bdbd73294717081dfad8c6adc08a49a28197372bcf3df35e
GET /2023/09/celeste-v6458966-pc.html HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:09:59 GMT
content-type: text/html
last-modified: Mon, 04 Dec 2023 02:09:45 GMT
vary: Accept-Encoding
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 29 Oct 1923 20:30:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tfm1LyJ3MoZVpFL5IVkboAHrfq6XNLOK8SUBv63I12z3ZsaLVpg6%2FGNtnUiGODRSfudPIE6rRHpYr5kfpwahPhYju9QoDmUD3OAELqtw8viREQq8a%2BvFG%2B6TeGkfjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082ad2878b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?v=ext&blog=106163218&post=111745&tz=0&srv=game-2u.com&j=1%3A12.8.1&host=game-2u.com&ref=&rand=0.3285514374339723
200 OK 50 B URL GET HTTP/2 pixel.wp.com/g.gif?v=ext&blog=106163218&post=111745&tz=0&srv=game-2u.com&j=1%3A12.8.1&host=game-2u.com&ref=&rand=0.3285514374339723
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=106163218&post=111745&tz=0&srv=game-2u.com&j=1%3A12.8.1&host=game-2u.com&ref=&rand=0.3285514374339723 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
200 OK 983 B URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4186), with no line terminators
Hash ea958276b7de454bd3c2873f0dc47e5f
b143f6e8e8f79d8f104c26b0057ef5514d763219
2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe
GET /c/6.4.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill.min.js
200 OK 42 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a98016751e498c06d434cc022ca1a44
6aa9af5fe436eab9c313de9f0bea072c04637624
da9ed5720b674f0d297fe621ac2d8d518c4e622bef1e9b0d4ae489dee9aa43f8
GET /c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 26 Sep 2023 14:23:26 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?resize=200%2C200&ssl=1
200 OK 10 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73e650cf63518c05309f52b6bcde6653
44e3219a21f7147efa96c56943020138367d09a6
be203229536dca41d0e3350f90c17c605d43361a675da51e25e9d42c18f502fb
GET /images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 10116
last-modified: Mon, 02 Oct 2023 13:27:10 GMT
expires: Thu, 02 Oct 2025 01:27:10 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "88e41d9dc3fdbfd5"
vary: Accept
x-nc: HIT arn 2
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=200%2C200&ssl=1&resize=200%2C200
200 OK 7.9 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=200%2C200&ssl=1&resize=200%2C200
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8b57194b60bc7e7c2dee3ddcf70e1a5f
69033cc1d18510d4381927d339601be9f636851d
e8a7f600c90d2398f1f307db90650a1073dcc4bfd1259091a772caf0cec9af47
GET /game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=200%2C200&ssl=1&resize=200%2C200 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7878
last-modified: Sun, 08 Oct 2023 00:38:39 GMT
expires: Tue, 07 Oct 2025 12:38:39 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "4904028594659e2a"
vary: Accept
x-nc: HIT arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1668003490/1ef4e00b/38638574.jpg?resize=200%2C200&ssl=1
200 OK 10 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1668003490/1ef4e00b/38638574.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 928a3ca8ed5d134ded95922da81863f7
6477f6c361cf3ac1144902ed1dd6c644bdf303f2
3377b98aa6155af7043bfc6d8a637f0e89739dc8c408a7024b45007ad9ef45e0
GET /images.vfl.ru/ii/1668003490/1ef4e00b/38638574.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 10398
last-modified: Wed, 09 Nov 2022 22:25:03 GMT
expires: Sat, 09 Nov 2024 10:25:03 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1668003490/1ef4e00b/38638574.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "224fc76a1dc8a173"
vary: Accept
x-nc: HIT arn 3
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1608505944/44d0dd7c/32725170.jpg?resize=200%2C200&ssl=1
200 OK 7.6 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1608505944/44d0dd7c/32725170.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4f8747db8344b5ca31431f9b955dc00d
03f79cf321883cd7a31314878ef9d76fc2497bcf
c77d15e8ed9abd60b22d635c4631a6f76f360202d30c699efd3234631fa295f0
GET /images.vfl.ru/ii/1608505944/44d0dd7c/32725170.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7628
last-modified: Sat, 04 Nov 2023 00:02:46 GMT
expires: Mon, 03 Nov 2025 12:02:46 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1608505944/44d0dd7c/32725170.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "4ff2d61daf8bc375"
vary: Accept
x-nc: HIT arn 5
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1594378632/4b3afb3c/31039142.jpg?resize=200%2C200&ssl=1
200 OK 14 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1594378632/4b3afb3c/31039142.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5d8b8305dd2af2dfeac5aae24847b183
05925f945432cf544a68f8258d1fa86383e05e72
be6a8f7f049210941a910834bef26acb4ddfdba7e93a906f43c1ba953789e395
GET /images.vfl.ru/ii/1594378632/4b3afb3c/31039142.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 14422
last-modified: Fri, 30 Dec 2022 14:03:56 GMT
expires: Mon, 30 Dec 2024 02:03:56 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1594378632/4b3afb3c/31039142.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "ef5b1568fa0372dd"
vary: Accept
x-nc: HIT arn 6
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1670535497/93cfc2bd/38665474.jpg?resize=200%2C200&ssl=1
200 OK 7.4 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1670535497/93cfc2bd/38665474.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 26af078060d78dbccc2a597bd8476395
d479ac2a8bfd50ca3b82357f062a7c3e6adc5d6f
e62e1d0bc1fefbe93df27ce00c0bb638c7692d18415965959659accb04e2c62a
GET /images.vfl.ru/ii/1670535497/93cfc2bd/38665474.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7436
last-modified: Thu, 08 Dec 2022 23:03:12 GMT
expires: Sun, 08 Dec 2024 11:03:12 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1670535497/93cfc2bd/38665474.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "923ac38425938c16"
vary: Accept
x-nc: HIT arn 8
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?resize=200%2C200&ssl=1
200 OK 4.8 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3ac94b25f159821c5d4d436a7d614f86
a10f60423ae83a8d4fe46220551e0754c69e87c7
2b0b87f15b6f1fd8809bc65c34f0afba65400302a8afedc4c315b8ffb8216e2d
GET /images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 4756
last-modified: Sat, 25 Mar 2023 02:08:27 GMT
expires: Mon, 24 Mar 2025 14:08:27 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1679707845/154521c0/38824712.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b704667559c2a6e3"
vary: Accept
x-nc: HIT arn 8
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1659861766/f24f649e/38521057.jpg?resize=200%2C200&ssl=1
200 OK 4.5 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1659861766/f24f649e/38521057.jpg?resize=200%2C200&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ccf56c7235436ec1783acfaa0efeed4c
55698c449b1607e23761363a0172a0290e313cd1
becf8b14348bb911289350d3797a2287adaeccf5866d9df5ef060b869e87b611
GET /images.vfl.ru/ii/1659861766/f24f649e/38521057.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 4544
last-modified: Tue, 21 Nov 2023 00:47:24 GMT
expires: Thu, 20 Nov 2025 12:47:24 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1659861766/f24f649e/38521057.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "3ef9c33af80f5a9b"
vary: Accept
x-nc: HIT arn 2
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
game-2u.com/wp-content/themes/poster/js/skip-link-focus-fix.js?ver=20130115
200 OK 25 kB URL GET HTTP/3 game-2u.com/wp-content/themes/poster/js/skip-link-focus-fix.js?ver=20130115
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash 88744222f59f4700c6bc9212e12a653c
df0bf43d60bed605eabbcb2776e0fbb46f1d1c05
4b179f8204186f3aa954f47cd81dbe86bf89c08edb8d5341b8e0697d99e35073
GET /wp-content/themes/poster/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=80e%2FrUcWlLCiMgvwETZlVfEDY61madywPHep0wAtj0vLvpMRSO8AD57z9%2FygREl6eRBCA7Unq0orrQm5%2FK7ObROmWr8m%2Fs%2Bd1oMQlSX4YgnwQSCapJLX5qWr2flGqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586fb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i0.wp.com/images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?w=1280&resize=1280&ssl=1
200 OK 7.1 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?w=1280&resize=1280&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2a19271a79ed86157e035261d50ce8b8
bdaaab52551234d79c3420c71d72bf2004010899
11230d9a5e6db15347e2b28947e0b3128c642bf897dab51e24ab411164b61c35
GET /images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png?w=1280&resize=1280&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7082
last-modified: Sat, 26 Aug 2023 13:56:19 GMT
expires: Tue, 26 Aug 2025 01:56:19 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1617183253/97cf8bb0/33890012.png>; rel="canonical"
x-content-type-options: nosniff
etag: "0987e1961abf81c6"
vary: Accept
x-nc: HIT arn 3
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280&resize=1280&ssl=1
200 OK 7.7 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280&resize=1280&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1f2664d6059193e6c1a59ee7ef14d1a0
46542860abd849426ea23d66c601ff0888d735db
f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621
GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280&resize=1280&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7712
last-modified: Sun, 19 Feb 2023 09:06:57 GMT
expires: Tue, 18 Feb 2025 21:06:57 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "95d72d4081ab31e0"
vary: Accept
x-nc: HIT arn 7
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=1280&resize=1280&ssl=1
200 OK 14 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=1280&resize=1280&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 59902e25d0dfdafbe8cefa39310a736f
c6e4c10f0959d74e62252616b54abcbc3c619ad8
c6049fca4895c5c101af68ae52759e4b2a5c64c873c9be7705ec2fca13e0ba65
GET /game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=1280&resize=1280&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 13968
last-modified: Mon, 04 Dec 2023 02:10:03 GMT
expires: Wed, 03 Dec 2025 14:10:03 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f43a59e3b0106771"
vary: Accept
x-nc: MISS arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 52 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint6C:2A:75:F2:3F:EF:4F:43:B1:8D:C3:B7:E9:2E:4A:EF:40:6A:FC:92
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3967)
Hash dc319f37bd5d2bc2dd28bf8c4dba24d5
56ff6e83cb1167193db2958b1959c914e4d15ffe
a4c843b10a1f9fa75a69d9d1e99e5353e91e3785aefd2952a6404d8cde5c0332
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 04 Dec 2023 02:10:03 GMT
expires: Mon, 04 Dec 2023 02:10:03 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15255610558080523766
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51627
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
game-2u.com/wp-content/uploads/2023/05/Bum-Simulator-DOGE-PC.jpg
200 OK 28 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/05/Bum-Simulator-DOGE-PC.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 241x339, components 3\012- data
Hash 10a5d00f308b72cd20a26be064ab5c05
646208e3eaaa0951e7e011b99074da26783968b6
d764184685b08ee9c5b0b822b4d4ee642444c6f06016a0ab0c07253d24fb0102
GET /wp-content/uploads/2023/05/Bum-Simulator-DOGE-PC.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/jpeg
content-length: 28545
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Fri, 12 May 2023 21:37:49 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WfBsV1lUGexiIZl3t%2FepYD9PyEDcEw5BillrVmoyMYeBKDfu8QEXq16ttMc4CrGMuZZ0xJ3WSgNcBj5htf787VxEfAE5p5Lbx0H5MNalK%2F7Rj%2B3LFrr3%2FBB3Igqu%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c1fe46b4ff-OSL
alt-svc: h3=":443"; ma=86400
eptougry.net/tag.min.js
200 OK 26 kB IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjecteptougry.net
Fingerprint11:79:5C:20:45:FA:F1:CA:9E:62:2E:C9:EC:A4:EA:48:4C:56:F4:7E
ValidityMon, 09 Oct 2023 05:31:40 GMT - Sun, 07 Jan 2024 05:31:39 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash fb7eb4b07c3e717cad649d3afa99ca57
ba3a9cdd70a5f99c0ed8a032d79a08a6edb673d2
e6aa84f006f03b6a1cf7f3a082a3d7470943d3f29253cc4b0d1ee0f3e2cc76ee
GET /tag.min.js HTTP/1.1
Host: eptougry.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: text/javascript; charset=utf-8
content-length: 25611
content-encoding: br
x-trace-id: 65159414d450cee94b8243f6da58aabd
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sat, 02 Dec 2023 17:37:01 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
images.weserv.nl/?url=https://images-na.ssl-images-amazon.com/images/I/61ZLqUYMoOL._AC_SX425_.jpg
200 OK 42 kB URL GET HTTP/2 images.weserv.nl/?url=https://images-na.ssl-images-amazon.com/images/I/61ZLqUYMoOL._AC_SX425_.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectweserv.nl
Fingerprint8D:EF:7F:46:B7:B8:AC:FA:D0:4B:85:31:88:8C:17:90:3D:EA:EB:EB
ValiditySun, 15 Oct 2023 06:06:37 GMT - Sat, 13 Jan 2024 06:06:36 GMT
File type JPEG image data, baseline, precision 8, 425x538, components 3\012- data
Hash 2e90b4e41906b68e7a7ae206845a804e
a8b6fd399df16f8f404040e882f5a937c3e2770f
cdd959239c421a0e6123e4cf01ae1d4a5bd59b1da39a6ab604ab2ca4c55c028f
GET /?url=https://images-na.ssl-images-amazon.com/images/I/61ZLqUYMoOL._AC_SX425_.jpg HTTP/1.1
Host: images.weserv.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/jpeg
content-length: 42277
content-disposition: inline; filename=image.jpg
link: <https://images-na.ssl-images-amazon.com/images/I/61ZLqUYMoOL._AC_SX425_.jpg>; rel="canonical"
expires: Sun, 01 Dec 2024 16:10:57 GMT
cache-control: public, max-age=31536000
x-upstream-response-length: 39081
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
timing-allow-origin: *
x-images-api: 5
x-cache-status: MISS
last-modified: Sat, 02 Dec 2023 16:10:57 GMT
cf-cache-status: HIT
age: 3995
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I4h53cdHxwKrc%2BPTLdOg2rRZ%2BUxKZUpD6uGcNS6iU1jroHZlwpYKlwr2Q%2FMa6X1wd%2F8oAzF0m%2F1FuGXL6305SPbuCklVWab2lrAgzsrYqwUWPm3s8IKKN%2F5j5t%2B6Diq1gnHW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830082c2dc41d97f-HEL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
game-2u.com/wp-content/uploads/2023/10/Thief-Simulator-2-v106-GoldBerg-PC.png
200 OK 131 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/10/Thief-Simulator-2-v106-GoldBerg-PC.png
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type PNG image data, 241 x 339, 8-bit/color RGB, non-interlaced\012- data
Size 131 kB (131283 bytes)
Hash f33bd909d8bfaad51c6b38f2007fc2aa
961a43ed7b161814653b38bcde55132f62fa61b7
1ac183556b8c199e0d39682e1c86d0f50f5147eff62388f4d51b3d5b365ae2cc
GET /wp-content/uploads/2023/10/Thief-Simulator-2-v106-GoldBerg-PC.png HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/png
content-length: 131283
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 11 Oct 2023 02:45:51 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bfXJ0RCdlGzfvw4Y8Tysh9yGtLD0THdL75F%2BF%2FfUbVmCXqOLg8b4rPYgiomqq%2F0n6XfX1oh6BUZj%2BMwbecGkG7xwIfsmRrwa58UcVAErPal%2Fw7kXnvRRKfu6GSA6Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c1ee3db4ff-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=6.4.1
200 OK 21 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=6.4.1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 368ba7ca67ed69e755b2b965bb899602
16986e805484e81d29b4aa2a30b8bef2b96c6d0e
2ae5c3991327cd6ddd410751b4787244e0af8d1ecfcb03002864a0e90a990472
GET /css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=6.4.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 02:10:01 GMT
date: Mon, 04 Dec 2023 02:10:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/jquery/jquery.min.js
200 OK 30 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/jquery/jquery.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /c/6.4.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 28 Aug 2023 17:14:23 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500&resize=500&ssl=1
200 OK 7.7 kB URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500&resize=500&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1f2664d6059193e6c1a59ee7ef14d1a0
46542860abd849426ea23d66c601ff0888d735db
f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621
GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500&resize=500&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7712
last-modified: Sun, 19 Feb 2023 09:06:19 GMT
expires: Tue, 18 Feb 2025 21:06:19 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "6b02d3dbdaa697a7"
vary: Accept
x-nc: HIT arn 7
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=240&resize=240&ssl=1
200 OK 12 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=240&resize=240&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x337, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 34072efce20c05aedd054b73a3992177
fdcdaa0c90ea556646d1e144fe0fcc8ec4f44fb1
0f364b2a446daaf2e90e4c92d951de427e9994c9995c8db75c58b6a30ad45ef5
GET /game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg?w=240&resize=240&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 11480
last-modified: Sun, 03 Dec 2023 01:16:42 GMT
expires: Tue, 02 Dec 2025 13:16:42 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/09/Celeste-v6458966-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "32e2af7aa7d40c15"
vary: Accept
x-nc: MISS arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
mockingcolloquial.com/2e/59/01/2e59010ee40bb5ee297c2a0ecedaa23b.js
200 OK 23 kB URL GET HTTP/1.1 mockingcolloquial.com/2e/59/01/2e59010ee40bb5ee297c2a0ecedaa23b.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectmockingcolloquial.com
Fingerprint0D:DD:6E:9D:B2:2D:04:39:9A:AE:2B:D7:A5:16:91:38:8C:C7:3B:0E
ValidityTue, 28 Nov 2023 08:07:55 GMT - Mon, 26 Feb 2024 08:07:54 GMT
File type ASCII text, with very long lines (59732), with no line terminators
Hash 90e464e61715c14fd2fc322b25381b70
56f0f82f50810a6145f48dc0b297ad059619940e
1dffcc80fe2225b351a0442d03a85c839cd39a321e317b1d1446d3425ccef836
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /2e/59/01/2e59010ee40bb5ee297c2a0ecedaa23b.js HTTP/1.1
Host: mockingcolloquial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 61fd8b468d8a8c595c8b1e3693011d66
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
game-2u.com/wp-content/themes/poster/js/navigation.js?ver=20120206
200 OK 1.3 kB URL GET HTTP/3 game-2u.com/wp-content/themes/poster/js/navigation.js?ver=20120206
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash c3a5b08af3e63049707797efe65eab86
f66ed251ef8c24614ff24376d472f2f394f7b93f
d79752e33e156b5cb219ab45103fe0ed7d80f111533dd8eec42c57546b4da500
GET /wp-content/themes/poster/js/navigation.js?ver=20120206 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3m9afedUPvx%2BFTBd0925%2BXqy3xehGPj668I5rEG2%2FAlu%2B8eRYB2IzMRv0zS6Qt3QW4V%2F4f%2F%2BozxQKv6LEum4M9ozBb37%2FYR0%2Bh0NHcFJfr3ZcaLGgdXTSq2FcZdKAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586eb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js
200 OK 31 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (8171), with no line terminators
Hash dda652db133fddb9b80a05c6d1b5c540
60c8514c57a5db2980c4b046b0dd479bd427357b
c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
GET /c/6.4.1/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Jan 2023 11:16:33 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
mockingcolloquial.com/watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 mockingcolloquial.com/watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectmockingcolloquial.com
Fingerprint0D:DD:6E:9D:B2:2D:04:39:9A:AE:2B:D7:A5:16:91:38:8C:C7:3B:0E
ValidityTue, 28 Nov 2023 08:07:55 GMT - Mon, 26 Feb 2024 08:07:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1 HTTP/1.1
Host: mockingcolloquial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:03 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://game-2u.com
Access-Control-Allow-Origin: https://game-2u.com
Access-Control-Allow-Credentials: true
Location: https://mockingcolloquial.com/watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=a378d0e2556219ab7d69eed6658bb3ab45c7c66bb04326beea412cc548d6d3d8304b9a6a1518b4d2495ce9f56219f299b5ed792602cfb4809decfd90d729cd217840a2775f23d4d36e439d7e86c668b4be76115fe794c81e835472f1f4c2ae&pst=1701655863&rmtc=t
Set-Cookie: u_pl=15236932; expires=Tue, 05 Dec 2023 02:10:03 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTIzNjkzMiwiayI6ImI4MjA0OTZjYmUwZjUyMjQ1YjY4OTRhZTYyYzYzYmUwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMjY0MzE4LCJwaWQiOjE2MjY3OCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyMywicHQiOjQsInBrIjoidWM4ajV0eGhnZiIsImNwa3MiOnsiMjgiOiIyZTU5MDEwZWU0MGJiNWVlMjk3YzJhMGVjZWRhYTIzYiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9nYW1lLTJ1LmNvbS8yMDIzLzA5L2NlbGVzdGUtdjY0NTg5NjYtcGMuaHRtbCIsImFyIjpbXX19.gHPHqawlJEDnV6qFcloUToSYmbawtAwSQWDgyv6UIjE; expires=Mon, 04 Dec 2023 02:11:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c7328b2088f1212f4cbd5bdc373679d2
Strict-Transport-Security: max-age=0; includeSubdomains
my.rtmark.net/gid.js?userId=dbb599e1de1f487795bf6ac7d3f34b05
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=dbb599e1de1f487795bf6ac7d3f34b05
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 61001953481ccd54ae7f598d5a1782dd
cef54bfaa72d45dcc90cab1bdbd206ca23c8b394
f1d7624f2941e26d291114efc9f30937a0a98a8e907e9b1fd9d56f882798ee75
GET /gid.js?userId=dbb599e1de1f487795bf6ac7d3f34b05 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://game-2u.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=dbb599e1de1f487795bf6ac7d3f34b05; expires=Tue, 03 Dec 2024 02:10:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
accommodationcarpetavid.com/watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 accommodationcarpetavid.com/watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectaccommodationcarpetavid.com
Fingerprint2C:0E:A8:6E:92:6B:7C:47:43:C8:08:C9:97:DE:98:E8:7B:24:60:0E
ValidityTue, 28 Nov 2023 10:54:07 GMT - Mon, 26 Feb 2024 10:54:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1 HTTP/1.1
Host: accommodationcarpetavid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 02:10:03 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://game-2u.com
Access-Control-Allow-Origin: https://game-2u.com
Access-Control-Allow-Credentials: true
Location: https://accommodationcarpetavid.com/watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=93c1516a19586a5b4fea4a44fa802817a9331ad49c1692adba4aca450e7a1f264f1d377e6e6c90d0a229e8cca6a6a7e73e9ffe046dae6524891dc5cd6ad0ef7d0b302739a76b61dcef969933f9d50bf7021ff59e93b578395e2f9dd8f8da&pst=1701655863&rmtc=t
Set-Cookie: u_pl=19052443; expires=Tue, 05 Dec 2023 02:10:03 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxOTA1MjQ0MywiayI6ImVlOWJmMzU2ZDYwMTMzMmEzYWNlMzljZTZkNjNhMzQ2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMjY0MzE4LCJwaWQiOjE2MjY3OCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJ3NDdwZ2hkdSIsImNwa3MiOnsiMjgiOiI5MjZjZWY4YjQ3YzMyZjE0ZTAwZjlhNDZkOGNiNWNkZiIsIjI5IjoiMWMxODA2MTkxMjIxZWE5ODhmZjBhYjIxMjdmNmU1MDcifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vZ2FtZS0ydS5jb20vMjAyMy8wOS9jZWxlc3RlLXY2NDU4OTY2LXBjLmh0bWwiLCJhciI6W119fQ.mMRg3RJ8CpLro2LN19aQjhRopzlbXIj-5oi7H5NkKnU; expires=Mon, 04 Dec 2023 02:11:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 94de7ea9f8e19928cc48705888c5b384
Strict-Transport-Security: max-age=0; includeSubdomains
accommodationcarpetavid.com/92/6c/ef/926cef8b47c32f14e00f9a46d8cb5cdf.js
200 OK 23 kB URL GET HTTP/1.1 accommodationcarpetavid.com/92/6c/ef/926cef8b47c32f14e00f9a46d8cb5cdf.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectaccommodationcarpetavid.com
Fingerprint2C:0E:A8:6E:92:6B:7C:47:43:C8:08:C9:97:DE:98:E8:7B:24:60:0E
ValidityTue, 28 Nov 2023 10:54:07 GMT - Mon, 26 Feb 2024 10:54:06 GMT
File type ASCII text, with very long lines (59718), with no line terminators
Hash 6a9636af2f6c71ecfb2f3900a9e57757
40c622cad34651d47bf7e0b7876787dd3cd58fc1
339c62bb214126b3584b51c5b9474ea38947339227100a44a2d35076c7bb4d8d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /92/6c/ef/926cef8b47c32f14e00f9a46d8cb5cdf.js HTTP/1.1
Host: accommodationcarpetavid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 02:10:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 38ad38b90a7156b2eaf86843c59acc85
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
accommodationcarpetavid.com/watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=93c1516a19586a5b4fea4a44fa802817a9331ad49c1692adba4aca450e7a1f264f1d377e6e6c90d0a229e8cca6a6a7e73e9ffe046dae6524891dc5cd6ad0ef7d0b302739a76b61dcef969933f9d50bf7021ff59e93b578395e2f9dd8f8da&pst=1701655863&rmtc=t
200 OK 2.1 kB URL GET HTTP/1.1 accommodationcarpetavid.com/watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=93c1516a19586a5b4fea4a44fa802817a9331ad49c1692adba4aca450e7a1f264f1d377e6e6c90d0a229e8cca6a6a7e73e9ffe046dae6524891dc5cd6ad0ef7d0b302739a76b61dcef969933f9d50bf7021ff59e93b578395e2f9dd8f8da&pst=1701655863&rmtc=t
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectaccommodationcarpetavid.com
Fingerprint2C:0E:A8:6E:92:6B:7C:47:43:C8:08:C9:97:DE:98:E8:7B:24:60:0E
ValidityTue, 28 Nov 2023 10:54:07 GMT - Mon, 26 Feb 2024 10:54:06 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (2651)
Hash 36bb2ce95b42018cf3aac85cdb263c4f
83b3c5092c7350250e9f9cdee50d3cf23ac9ade1
abeedff63e1bf0ce3a97c600df211eccfa4fdc3d9d3a54c36ad432e2972119f0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1646127075915.js?key=ee9bf356d601332a3ace39ce6d63a346&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=93c1516a19586a5b4fea4a44fa802817a9331ad49c1692adba4aca450e7a1f264f1d377e6e6c90d0a229e8cca6a6a7e73e9ffe046dae6524891dc5cd6ad0ef7d0b302739a76b61dcef969933f9d50bf7021ff59e93b578395e2f9dd8f8da&pst=1701655863&rmtc=t HTTP/1.1
Host: accommodationcarpetavid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
Referer: https://game-2u.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=19052443; ain=eyJhbGciOiJIUzI1NiJ9.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.mMRg3RJ8CpLro2LN19aQjhRopzlbXIj-5oi7H5NkKnU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 02:10:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://game-2u.com
Access-Control-Allow-Origin: https://game-2u.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9:1:1; expires=Mon, 11 Dec 2023 02:10:04 GMT; secure; SameSite=None
iprced3fa2cfee1d26b0c045e5ea21ff38a1=3569806; expires=Mon, 04 Dec 2023 06:10:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
pdhtkv5=true; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
uncs5=1; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3bf743cb4bfce34cbd79258d340e8bb9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1382
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 04 Dec 2023 02:10:44 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://game-2u.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
mockingcolloquial.com/watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=a378d0e2556219ab7d69eed6658bb3ab45c7c66bb04326beea412cc548d6d3d8304b9a6a1518b4d2495ce9f56219f299b5ed792602cfb4809decfd90d729cd217840a2775f23d4d36e439d7e86c668b4be76115fe794c81e835472f1f4c2ae&pst=1701655863&rmtc=t
200 OK 2.1 kB URL GET HTTP/1.1 mockingcolloquial.com/watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=a378d0e2556219ab7d69eed6658bb3ab45c7c66bb04326beea412cc548d6d3d8304b9a6a1518b4d2495ce9f56219f299b5ed792602cfb4809decfd90d729cd217840a2775f23d4d36e439d7e86c668b4be76115fe794c81e835472f1f4c2ae&pst=1701655863&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectmockingcolloquial.com
Fingerprint0D:DD:6E:9D:B2:2D:04:39:9A:AE:2B:D7:A5:16:91:38:8C:C7:3B:0E
ValidityTue, 28 Nov 2023 08:07:55 GMT - Mon, 26 Feb 2024 08:07:54 GMT
File type HTML document, ASCII text, with very long lines (2573)
Hash 738d39227c3f74eb248fbb0ec908b839
fea3b92b0e8ac014a9f851a0dbac2bdbf02b745d
2dd9dfd841200c07fa19cafe263171fff46241b5ae3b212b9e3292d01e03dbc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.544491198852.js?key=b820496cbe0f52245b6894ae62c63be0&kw=%5B%22celeste%22%2C%22v6458966%22%2C%22pc%22%2C%22-%22%2C%22game-2u%22%2C%22com%22%5D&refer=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&tz=0&dev=e&res=14.3095&uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1&shu=a378d0e2556219ab7d69eed6658bb3ab45c7c66bb04326beea412cc548d6d3d8304b9a6a1518b4d2495ce9f56219f299b5ed792602cfb4809decfd90d729cd217840a2775f23d4d36e439d7e86c668b4be76115fe794c81e835472f1f4c2ae&pst=1701655863&rmtc=t HTTP/1.1
Host: mockingcolloquial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
Referer: https://game-2u.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=15236932; ain=eyJhbGciOiJIUzI1NiJ9.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.gHPHqawlJEDnV6qFcloUToSYmbawtAwSQWDgyv6UIjE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://game-2u.com
Access-Control-Allow-Origin: https://game-2u.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9:1:1; expires=Mon, 11 Dec 2023 02:10:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
pdhtkv23=true; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
uncs23=1; expires=Tue, 05 Dec 2023 02:10:04 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 59707d1b5730446a87c90fa1d1a1fa32
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ossmightyenar.net/500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 0 B URL GET HTTP/2 ossmightyenar.net/500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectossmightyenar.net
Fingerprint0E:D3:09:79:9C:DD:16:39:20:44:A5:13:2B:E0:03:A4:E6:4A:A9:CA
ValidityWed, 29 Nov 2023 05:17:05 GMT - Tue, 27 Feb 2024 05:17:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: ossmightyenar.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://game-2u.com/
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:04 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://game-2u.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
pigsflintconfidentiality.com/pixel/purst?dl=0&th=0&sc=0&rs=3793&rd=3793&fd=967&bv=23.11.v.9&tmpl=70
200 OK 0 B URL GET HTTP/1.1 pigsflintconfidentiality.com/pixel/purst?dl=0&th=0&sc=0&rs=3793&rd=3793&fd=967&bv=23.11.v.9&tmpl=70
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectpigsflintconfidentiality.com
FingerprintA0:DF:86:E6:74:86:72:8F:FB:8A:A5:59:BC:A6:A6:18:67:FE:CE:1E
ValidityTue, 28 Nov 2023 08:13:09 GMT - Mon, 26 Feb 2024 08:13:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=3793&rd=3793&fd=967&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: pigsflintconfidentiality.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 02:10:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.2
200 OK 145 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.2
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Size 145 kB (144576 bytes)
Hash 759cfb7982cccb42ee4c689e1528c381
2f6efd7722027ca9f8e838e953e079057bbc0553
875509c014bdd1c5fc1c0b8e46bcd760ef78a590f3bc91b86280a996640f5066
GET /wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.2 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Nov 2023 17:26:07 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jMi7NXB%2FDcBiJGpfiK0B2CH3HCnBHvgP23rDV5e%2FTM2r6Szi2uVSZvDS%2FXIkYfMpaMuSF%2F03x5Sd9Tfur2TB8ha3MQWZYaotrPpZo4PKnbu4Us7OwXxGvuNt4kr29A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ossmightyenar.net/500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 50 kB URL GET HTTP/2 ossmightyenar.net/500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectossmightyenar.net
Fingerprint0E:D3:09:79:9C:DD:16:39:20:44:A5:13:2B:E0:03:A4:E6:4A:A9:CA
ValidityWed, 29 Nov 2023 05:17:05 GMT - Tue, 27 Feb 2024 05:17:04 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash e5d719137c39a3e335ea4bee7ee47ed5
ce34bcd361b84cf940690af8e20131cb28ca0d48
c74dea8d418ecb3c10b33824f81d03921af969053e2c7b5e28a2e00cc3491c02
GET /500/5746120?excludes=&oaid=dbb599e1de1f487795bf6ac7d3f34b05&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fgame-2u.com%2F2023%2F09%2Fceleste-v6458966-pc.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: ossmightyenar.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Cookie: OAID=d34ac43929884d9095ee99396cd37111
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: application/javascript
x-trace-id: 6853b555a0d7dafa8c43ffbf0c81e12f
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://game-2u.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=dbb599e1de1f487795bf6ac7d3f34b05; expires=Tue, 03 Dec 2024 02:10:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false&ver=51faa0beb0a072f9ab2c
200 OK 12 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false&ver=51faa0beb0a072f9ab2c
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type Unicode text, UTF-8 text, with very long lines (36679), with no line terminators
Hash 630849b189e71c07dffd8e950ad5df61
0cf84643eb1ab678ff8fe3087219018a1e08ab90
c33a5b5aef7f8a222e2030279a3e4089869473692ed51ba99cd4a26457b2477d
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false&ver=51faa0beb0a072f9ab2c HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: text/css
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 18 Nov 2023 23:10:10 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BSni5aP6iQkJ3YdKZdWuSyoxld1706PkLSj0%2FBzSbTa089KA4kilIwqvGRkEyUb8J2r20j8KwrmVkwJbskhTECtQSXgbJn6t78OS3fXZGxWPh6DXNQsHSL%2FnLgGbCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082c15e0fb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=32%2C32&ssl=1
200 OK 944 B URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=32%2C32&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash a4383a7981be160f4caea541966b0c37
ff8887cf5112ef1fd077253112e1f595db5f011d
94f1fb6412d9f34d3433643a187445b6807663d15fc08739933204d4401a56ec
GET /game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=32%2C32&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: image/webp
content-length: 944
last-modified: Sun, 27 Aug 2023 09:17:14 GMT
expires: Tue, 26 Aug 2025 21:17:14 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "842fd8d4810895bc"
vary: Accept
x-nc: HIT arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/w.js?ver=202349
200 OK 4.8 kB URL GET HTTP/2 stats.wp.com/w.js?ver=202349
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (11119), with no line terminators
Hash 1ac0848d5bceb8555feaf98f8fb860cb
117dcc305a16fbf0f0ef2d173c3c52adfa816047
585d4af3a08847a4604f8796b4841ebf7eaec7211606cc954f88dc9f27c72b28
GET /w.js?ver=202349 HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
x-minify: t
x-minify-cache: hit
etag: W/11154-1698845935987.3887
content-encoding: br
expires: Wed, 27 Nov 2024 16:32:01 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
anticipatedthirteen.com/pixel/purst?dl=0&th=0&sc=0&rs=4129&rd=4129&fd=1142&bv=23.11.v.9&tmpl=70
200 OK 0 B URL GET HTTP/1.1 anticipatedthirteen.com/pixel/purst?dl=0&th=0&sc=0&rs=4129&rd=4129&fd=1142&bv=23.11.v.9&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectanticipatedthirteen.com
FingerprintCC:17:E5:B3:52:51:1B:BF:80:D1:31:E9:B9:2F:F9:0F:9D:59:13:28
ValidityTue, 28 Nov 2023 11:03:31 GMT - Mon, 26 Feb 2024 11:03:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=4129&rd=4129&fd=1142&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: anticipatedthirteen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 02:10:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2e59010ee40bb5ee297c2a0ecedaa23b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2e59010ee40bb5ee297c2a0ecedaa23b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=2e59010ee40bb5ee297c2a0ecedaa23b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:05 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d9575c8c8b052278f1468e756ce703d4
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=926cef8b47c32f14e00f9a46d8cb5cdf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=926cef8b47c32f14e00f9a46d8cb5cdf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=926cef8b47c32f14e00f9a46d8cb5cdf&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 02:10:05 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5490f790dda2a50e02341fa2205123e3
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/bi/6b/61/01/6b61017bb9434518784c71338436e2ca/1688140233.jpg
200 OK 48 kB URL GET HTTP/2 cdn.cloudimagesb.com/bi/6b/61/01/6b61017bb9434518784c71338436e2ca/1688140233.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 728x90, components 3\012- data
Hash 850f58b1b1f8b8e82830b76d8663980f
2510191ebe98efdaf9cbf94032577d39cce9a850
c589311da936afe6d9afe694040895b19c7456b55f6d51095c1b8ea83ebf905b
GET /bi/6b/61/01/6b61017bb9434518784c71338436e2ca/1688140233.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: image/jpeg
content-length: 48405
server: nginx/1.21.6
last-modified: Fri, 30 Jun 2023 15:50:41 GMT
etag: "649ef9d1-bd15"
expires: Wed, 06 Dec 2023 02:10:04 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
game-2u.com/wp-content/cache/wpfc-minified/1btgct5y/g4fzp.js
200 OK 1.1 kB URL GET HTTP/3 game-2u.com/wp-content/cache/wpfc-minified/1btgct5y/g4fzp.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (1187), with no line terminators
Hash 2937302b118209e6c9060316c27d7ccc
84e75e8d5b7b30aff66dfb21a7722e8132ccfd2d
be3387fa8b18f4b268997e16489b78d4fc3dac6932ffb0ff952babc6018c3109
GET /wp-content/cache/wpfc-minified/1btgct5y/g4fzp.js HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Thu, 28 Sep 2023 10:01:45 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KeI29PSZOoWpxVaUvhwYRk%2FWnWYXX1ovqflN4sBC9ZRjo%2FrtzxEAC9dnbW2DCf9mYlO04Sz0BX%2F9eJ65yLGDoq03hkmtsLHPMkQD1i5Mj%2FmuEsB7HRXbm0VJ4mpYog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b21849b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.ouo.io/js/full-page-script.js
200 OK 24 kB URL GET HTTP/2 cdn.ouo.io/js/full-page-script.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4C:30:F8:28:4D:C5:98:31:A7:A3:07:FC:34:2E:CC:A4:7E:39:66:75
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (24222), with no line terminators
Hash 96bba75cededac75702ba6ac716d4973
775243f4de23825c140308e8f2c4cac797e5a750
5b373b36e3314ce0f7096a491c4a5b951aeb87dabca29702406e8b9bc28e0a0f
GET /js/full-page-script.js HTTP/1.1
Host: cdn.ouo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: max-age=86400
cf-bgj: minify
etag: W/"5a17d83f-5e9e"
expires: Mon, 04 Dec 2023 07:20:59 GMT
last-modified: Fri, 24 Nov 2017 08:28:47 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 24541
set-cookie: __cf_bm=wJndZbPUDnjInhlzomizKHEvGZzIIg7xCaLAIiretv0-1701655800-0-AR0d/FMyyG7g8zZ/1HwkAT+QLTbUsJnacm2H0mM4Nw961S3rqivw4c05CRLxDe1epPhQfhA6GqQENIja8OlOOVQ=; path=/; expires=Mon, 04-Dec-23 02:40:00 GMT; domain=.ouo.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b35897b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.2
200 OK 8.0 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.2
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (8246), with no line terminators
Hash 95e8541b1c7d8d1c6d971b8a1254f05e
a0a315f535cefee969c8f938ae9133beb051b51d
94d90d0cae68aae94246413284189ad0fd41bca226dcfc1d3394f25087df2ede
GET /wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.2 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Nov 2023 17:26:07 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q3HtTzZvNyRn0PuSCUOqBwzE1ha1r7aQPnK9JvRqY%2Btx2Xf0R18ny8WoibmVop5ggJN84WwEf2KYNAHEtmt0aZT2IQ8eWKsrs6xNvQKJNQ7NlNcf8kmfE4DwU%2F3Tow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b26876b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ad.a-ads.com/1024368?size=728x90
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/1024368?size=728x90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11011)
Hash 1c3024d6545c640b09cc5954d1525764
2e5f817f4873ba0f143365fbac93772732387059
773b89f99c40acd1e5475048edbef22d72b6c82465b0c17ece84887f0cce45d6
GET /1024368?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:01 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://game-2u.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false&ver=a812fafe63c2ca6c059f
200 OK 77 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false&ver=a812fafe63c2ca6c059f
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false&ver=a812fafe63c2ca6c059f HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 18 Nov 2023 23:10:10 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1OpTBUXGDfiuGVu59Ymzc%2B%2BfGWpgaesMMShGhajdX2QSkgdoY7fAZC5%2BIitkDxOpiwcHkJCA8h%2Fw6%2BuCVW3Kmyt9NURlB9a2qxGtQgSfREfOVlpNJQH2Gm4809jOhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082c14e0eb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dyncdn.me/posters2/1/19915319aedda12c6c70d6c4c206f2ce93fbab4b.jpg
0 B URL GET dyncdn.me/posters2/1/19915319aedda12c6c70d6c4c206f2ce93fbab4b.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /posters2/1/19915319aedda12c6c70d6c4c206f2ce93fbab4b.jpg HTTP/1.1
Host: dyncdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
200 OK 144 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 144 kB (144379 bytes)
Hash 33c304429dc1a4408a96e6a74ffa2feb
c45fa8e65528d1bb2b46bf8a28af9eeaa1903d04
dbed482e5948ead5587d30a22306a5b611305f704de940bd22c76daf90e0a314
GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: image/png
content-length: 144379
server: nginx/1.21.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Wed, 06 Dec 2023 02:10:04 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/wp-trending-post-slider-and-widget/assets/js/wtpsw-public.js?ver=1.7
200 OK 10 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/wp-trending-post-slider-and-widget/assets/js/wtpsw-public.js?ver=1.7
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (388)
Hash 6a30c95fc2f160591ad31bfd666c0aa2
112338fa8bf1d505e395f694716f1f0188748f4e
520b6c3d1f1e887aae8715612e4d8d0a1fafd93ef09dd188f5d3261c2a1f632d
GET /wp-content/plugins/wp-trending-post-slider-and-widget/assets/js/wtpsw-public.js?ver=1.7 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 06 Sep 2023 09:08:35 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=otB7en7nvK0lbhtcSW%2F1HblyPKjJXJ3wkrDjDpHMkP965nFIAhts2e1LRCl6aSfhvsZEGdssn4P9868a6h3VJ4c9JIvuydjj75g3kmrnOKUcze3n2aGEcYE25bFswA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/cache/wpfc-minified/lmnzjxmp/g4fzp.css
200 OK 138 kB URL GET HTTP/3 game-2u.com/wp-content/cache/wpfc-minified/lmnzjxmp/g4fzp.css
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Size 138 kB (137996 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/cache/wpfc-minified/lmnzjxmp/g4fzp.css HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Thu, 28 Sep 2023 10:01:45 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8vPay8JBe0fPBk9hf8UqmFWP7SfForNPA4I2yn1ezMc4dMwUTsv3Crh2X5V4P%2BP1gRRrSQ8Kqk3yFjbR%2F%2Flzfi5ts7QsfYfImErROeq%2BNBfiC993kRBMU1Oeo3KJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b21847b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.wp.com/c/6.4.1/wp-includes/js/dist/i18n.min.js
200 OK 9.4 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/i18n.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (9729), with no line terminators
Hash 3597d2da73a2e3de74981fcc5ecbfce4
94f7e899ca4635c129e8285579b3f0e38cf19730
080a50955b97dc50d39c296cc22e8d02f07a3cfcc58d3127d93466e281514637
GET /c/6.4.1/wp-includes/js/dist/i18n.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 21 Sep 2023 13:26:32 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
200 OK 11 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (11256), with no line terminators
Hash 2b0dd7eecea03b4bdedb94ba622fdb03
703becba85161118dd6fc66af465428ef43f561c
b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
GET /c/6.4.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false&ver=c4973b0b0a57b1114aa1
200 OK 7.6 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false&ver=c4973b0b0a57b1114aa1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (7804), with no line terminators
Hash ba01c26c159ae9a8ae89dcdaa65ef979
364c1e48bedde76da660ac88a5513fc12eb6b248
9f3c484b0961d939951092f12ab6a70232f29f0213e77bd2f8abea3d88296e2c
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false&ver=c4973b0b0a57b1114aa1 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 18 Nov 2023 23:10:10 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iEbSFKhgKXQb2BjT0z%2BZcMCjAkE%2BzOv9qq6TldNviXzkXLhelBrEYyvH8SvhXGxMRe%2F9Fl2hVJvAz76k4G72T8DekqN9SNgkM8u8y%2B07O95EmeH6m4lPOF5Ct1NVCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586db4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/uploads/2023/03/Cosmoteer-Starship-Architect-and-Commander-v0212a-PC.jpg
200 OK 24 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/03/Cosmoteer-Starship-Architect-and-Commander-v0212a-PC.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 71x71, segment length 16, baseline, precision 8, 241x339, components 3\012- data
Hash 4ccb4f8a0b9514a05db8efc9dd7b1a31
0ee80361673ba076cbad1c64cfe67a6ea5d68ce9
07179ee532c2419df54fd32bb25d2a0b3ef3a15f03bfda91f9b60e1091aefbfe
GET /wp-content/uploads/2023/03/Cosmoteer-Starship-Architect-and-Commander-v0212a-PC.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/jpeg
content-length: 24328
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Tue, 21 Mar 2023 14:25:33 GMT
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2T5LejtzWR3SGwFla45LQdy97URCdH8SbDO4qF%2BSGSJvUotbDth92WaNvTEVigdA4v%2FLVTXQ%2BLDCzfLvYPdbcRJQgIigrAvix%2BI1vNy48pWd%2BZgQ3zkmX6UCs4dsLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c1ee41b4ff-OSL
alt-svc: h3=":443"; ma=86400
tzegilo.com/stattag.js
200 OK 19 kB IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjecttzegilo.com
FingerprintF2:F3:F8:C4:40:73:B6:FE:DD:58:70:D7:13:25:D2:51:21:88:50:0B
ValiditySun, 03 Dec 2023 17:24:18 GMT - Sat, 02 Mar 2024 17:24:17 GMT
File type ASCII text, with very long lines (18369)
Hash 89e89aea544ea2785d49cc4cd9cf26f6
7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b
86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDOCkV%2F4olJLyOs1sGwV28Ki0toiNaSdTj9ZFrFMHBPZeegmRcnDIsNf9drYXgthcBY5YpvzijeGxCYPvOeOIof0Em2x5LYId98LWVGRmusxtd%2BUhdNBSsf%2BXNJbVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c57c47712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/dist/url.min.js
200 OK 9.6 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/url.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (11016), with no line terminators
Hash 1182019e3541cbb1ae0c57a02c77e3c2
03fce017e1ba2a5c745e57ab4a021af36c68a60a
93e8a741e2ef129ebe45332d38120ba5d425d50386c9c5e6df73e60d768756db
GET /c/6.4.1/wp-includes/js/dist/url.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 26 Sep 2023 14:23:26 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ad.a-ads.com/1134233?size=336x280
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/1134233?size=336x280
IP
ASN #24940 Hetzner Online GmbH
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11011)
Hash 44742e93715e747b1f7d78e61c721466
303eabe37d34646085d50863dc29b71cf6031266
617622d8fc9c5b88ae164d7c6b74bb3c2c6de3336353d8baa45dfc49cad1bdbf
GET /1134233?size=336x280 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://game-2u.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 33dfc7c09679d97073e2b9e39a98ff1a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 04 Dec 2023 02:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pQpkmq1Tj1j4Ue1Y5FP8F9cBAogePVk8w7ZVp43lTgrwVw%2BVOuO8x2rhjkpUDTn%2B4wfBuCP0fyneHhv5ynr5Usf49XFbEnlsVep4cC0MuiqU350KQfNhMn6et1xCg4WAokivcG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c589856358-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188
200 OK 701 B URL GET HTTP/3 game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (727), with no line terminators
Hash e8b1dbb3b1a9bc1b59010bd6f7035465
c9d0ec84d9184c72ea6335c67193d25a90e003af
18c991e1cdc15a5c427215cf20569d60a7aa9bc32f1f7a2382640782a6e5bfe7
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 18 Nov 2023 23:10:10 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WcbPcncQadDU8rDnekUzWov5GKQ5bAMgcU3l%2BoDZldOE3iubHEl9BKNMCv01n80ivwjaNv1F%2B41YYdWAXlVmQY2iM0%2BfyWhxbQYLhFANblCtN7UtL6ENXzA9lPm0Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2586bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.wp.com/c/6.4.1/wp-includes/js/comment-reply.min.js
200 OK 3.0 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/comment-reply.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3056), with no line terminators
Hash dc7f90d513295c29acc441fe114a2cab
ca9e5069d9afc4aa13ab2e152313dfb476e842ef
f87915c58d8c25473c726646b58d2fe0ba9a136987571e6c810aba3c67b4f74c
GET /c/6.4.1/wp-includes/js/comment-reply.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ad.a-ads.com/1024056?size=728x90
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/1024056?size=728x90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11011)
Hash 3ae9b124807612a6c704d11a5c537dd6
7d5759bd2f870cc4af16e68e53f55a60c00da7fd
92e2429ac96e6cccfabdc2c692703d188428ebb618fe5ac0cea02192dee3a2cc
GET /1024056?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://game-2u.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: bb0e02664e2efb5bb09647664472c63a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 04 Dec 2023 02:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DybsWuZgsueFWiazATNt5HxizJsxCbzJSApT8DISrNH0OuOHJxV3JzcDjIG2lpJGoQ3wHLLItLiR8jVECZceK1Hn4bRzyEaMAg3lBPkhLIZMUpeoH46fcQfjZMEhWS9JIqXSmnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c6ea436358-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
game-2u.com/wp-content/uploads/2023/05/Dwarf-Fortress-v5008-PC.jpg
200 OK 20 kB URL GET HTTP/3 game-2u.com/wp-content/uploads/2023/05/Dwarf-Fortress-v5008-PC.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 71x71, segment length 16, baseline, precision 8, 241x339, components 3\012- data
Hash a078300dbf72571b21df86da2e50372b
665ba5c5643bc7bf8935fc2221eab4fcf7a14d95
30b62a5c364ebbef14c34421a0d1772d8b581804adfa570d7b314559a874b24a
GET /wp-content/uploads/2023/05/Dwarf-Fortress-v5008-PC.jpg HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0; dom3ic8zudi28v8lr6fgphwffqoz0j6c=3931e34d-fa07-4d7d-bd21-d2ad5beb0de9%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/jpeg
content-length: 20257
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 03 May 2023 04:07:38 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n6iEN50HEq%2FcYjGUj65dTKQVKkEiEHhBwcIdgBt6MjirOIqbbCK26lsnLy36XoP423Zj6eYTrlbeMK%2BMrbUiVAQOzdx9nuvtLQ41Wg1xoVHXxXkUNTPbDreHmiD7zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082c1fe47b4ff-OSL
alt-svc: h3=":443"; ma=86400
ossmightyenar.net/401/5746120
200 OK 89 kB URL GET HTTP/2 ossmightyenar.net/401/5746120
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjectossmightyenar.net
Fingerprint0E:D3:09:79:9C:DD:16:39:20:44:A5:13:2B:E0:03:A4:E6:4A:A9:CA
ValidityWed, 29 Nov 2023 05:17:05 GMT - Tue, 27 Feb 2024 05:17:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash b859fc6a56cf3fb6f4f9989bf2354c1b
384b3e49dbc5adb77fb57a7f5a3fec73986e9784
b7c6c75152d699d771272060ab0b94e390073d0769d85e514efc01f9490bf28a
GET /401/5746120 HTTP/1.1
Host: ossmightyenar.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/javascript
x-trace-id: 7f022587200dd3389069d8f3b04ee0a9
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=d34ac43929884d9095ee99396cd37111; expires=Tue, 03 Dec 2024 02:10:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js
200 OK 6.6 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6799), with no line terminators
Hash ccaa7ba23a1f74bc12d091b65b515c4f
26b795b942f321ee8237178a1fcc16f1cee5a99e
daceae61a869247d42436998814874e2698dc5f4789c65cd9bad98da52276db1
GET /c/6.4.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 19 Sep 2023 19:30:24 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.726948665863286
200 OK 50 B URL GET HTTP/2 pixel.wp.com/g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.726948665863286
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.726948665863286 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:02 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
4.bp.blogspot.com/-KAtXdOmRCMU/W5fwxPF9nhI/AAAAAAAADm4/62HUihambigyeGLPz452709F3gmpHcYHACLcBGAs/s1600/511gs1V34RL.jpg
200 OK 29 kB URL GET HTTP/2 4.bp.blogspot.com/-KAtXdOmRCMU/W5fwxPF9nhI/AAAAAAAADm4/62HUihambigyeGLPz452709F3gmpHcYHACLcBGAs/s1600/511gs1V34RL.jpg
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 160x270, components 3\012- data
Hash c6c3982c67d1b5f2a5321ab91bdfc46b
49b44a2fdbf59b7d03e960e49ba5d165388e3dfc
429cc0b55b01c52e857c13e6812e6cc3f5c60fbc7d391d71422b1aa53a28318c
GET /-KAtXdOmRCMU/W5fwxPF9nhI/AAAAAAAADm4/62HUihambigyeGLPz452709F3gmpHcYHACLcBGAs/s1600/511gs1V34RL.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "ve70"
expires: Tue, 05 Dec 2023 02:10:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="511gs1V34RL.jpg"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 02:10:03 GMT
server: fife
content-length: 28665
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/12.8.1/css/jetpack.css
200 OK 101 kB URL GET HTTP/2 c0.wp.com/p/jetpack/12.8.1/css/jetpack.css
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
Size 101 kB (100696 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/jetpack/12.8.1/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 13 Nov 2023 18:14:20 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/dist/hooks.min.js
200 OK 4.6 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/dist/hooks.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4704), with no line terminators
Hash 414c8462f6209b4905f767c8ba5c787d
a80b8b79908e6cdf11648f810e707a75c859cda3
007c3734a3f7737d74061ab5b96905dcb14ba1f88e7a6df55364b9d9573e3ce1
GET /c/6.4.1/wp-includes/js/dist/hooks.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 21 Sep 2023 13:26:32 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.4.1/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 14 kB URL GET HTTP/2 c0.wp.com/c/6.4.1/wp-includes/js/jquery/jquery-migrate.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /c/6.4.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
content-encoding: br
expires: Tue, 03 Dec 2024 02:10:00 GMT
cache-control: max-age=31536000
alt-svc: h3=":443"; ma=86400, h3=":443"; ma=86400
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
game-2u.com/wp-content/themes/poster/js/loadscripts.js?ver=1.0
200 OK 62 B URL GET HTTP/3 game-2u.com/wp-content/themes/poster/js/loadscripts.js?ver=1.0
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with no line terminators
Hash 231294cb7f69acc9d0ae2361f2161a29
be908827bad9ec2df48f93267164acb9f22cae17
37c2a7462252c4c8267db01cfc5db9824dca2b256bd1b9dff56851390ffbb575
GET /wp-content/themes/poster/js/loadscripts.js?ver=1.0 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ZUqnzHdgn7rzqZQxwwcS8Y2iRt0FbeRxTikWFruAJvpljCjIJwyZhb1rPxK30Jv3Lo%2BuX6HY7JqjhcC5gvgp0%2BC03CmpicMjnP5GibumZqokYeMywZkek%2BKVq0oEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830082b26875b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
eptougry.net/5/2094770/?oo=1&aab=1
200 OK 2.8 kB URL GET HTTP/2 eptougry.net/5/2094770/?oo=1&aab=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerLet's Encrypt
Subjecteptougry.net
Fingerprint11:79:5C:20:45:FA:F1:CA:9E:62:2E:C9:EC:A4:EA:48:4C:56:F4:7E
ValidityMon, 09 Oct 2023 05:31:40 GMT - Sun, 07 Jan 2024 05:31:39 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2998), with no line terminators
Hash d6c71a311ff98494e4f806aacdeaec1b
063cbe8b82faff8f3138cb5a37c2f6572f0ffd56
4434448e2409aa301750bda002cd5377e8c3253ce876885fb0831feabcf281b5
GET /5/2094770/?oo=1&aab=1 HTTP/1.1
Host: eptougry.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/json
x-trace-id: 5abad58c930063367fd3134999824d2d
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://game-2u.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=dbb599e1de1f487795bf6ac7d3f34b05; expires=Tue, 03 Dec 2024 02:10:03 GMT; path=/; secure; SameSite=None
oaidts=1701655803; expires=Tue, 03 Dec 2024 02:10:03 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
game-2u.com/wp-content/cache/wpfc-minified/k29rwfi0/g4fzp.css
200 OK 24 kB URL GET HTTP/3 game-2u.com/wp-content/cache/wpfc-minified/k29rwfi0/g4fzp.css
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (1679)
Hash ea29ae6725f1fac72a67a707f95eeb86
7bff8883739bb962507efff1712c20bb80b86eee
2c4e766af007523df0498014d261a03c780b80ec28e0674ca1c7afc834b014ac
GET /wp-content/cache/wpfc-minified/k29rwfi0/g4fzp.css HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: text/css
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Thu, 28 Sep 2023 10:01:45 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOYTQsq2F8%2F6HPbJUXNZ5nyWhJG%2BZXRyI1K4zRiD1qmOIPQrYCYnbL0YxnuBX%2F4FJXB2HUkm3sURild7BjPJSHZXNSgxX82xGV1SaUQbfkEX8LjFZozCYKh71dX7qw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b1f83cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-admin/admin-ajax.php
200 OK 7 B URL POST HTTP/3 game-2u.com/wp-admin/admin-ajax.php
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with no line terminators
Hash 505a83f220c02df2f85c3810cd9ceb38
42a8f651d79fd005eeac0612df6442b983a01184
c88a0b907419a70c27ab7c1f8e5fb54441a4d9c3567e4c928fa7b2091194aecf
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 70
Origin: https://game-2u.com
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: text/html; charset=UTF-8
vary: Origin,Accept-Encoding
access-control-allow-origin: https://game-2u.com
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
set-cookie: PHPSESSID=a0af9ffabdfedc4fe8a179251b5a7289; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QDR4HrKme6wggin8rVauHKbvQ87MlBZ0A%2BPcvEhKbvck%2BLJnb3gJtiTjlXKqF1bNM4dDTDXo8DrLu9vd2q2GN2oPiWu63GQ%2BxBYFF%2FFB0TmgcAYzYZefFbkj%2BU3kyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082c04dd3b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stats.wp.com/e-202349.js
200 OK 6.9 kB IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (7100), with no line terminators
Hash 530c085c7457919e6f6a76c67b3419ad
4c4929f20e73b6f41fe3474669bfea17b36fe49d
5db8b724469197930b66337c5a9ff7301c4ad5a52e7fc3134b4a568f45199aed
GET /e-202349.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
vary: Accept-Encoding
x-minify: t
x-minify-cache: hit
etag: W/13576-1684461103136.7104
content-encoding: br
expires: Sat, 30 Nov 2024 21:59:05 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=192%2C192&ssl=1
200 OK 7.4 kB URL GET HTTP/2 i0.wp.com/game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=192%2C192&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 17ba3b75c727f8e31df88e47f64b6bbb
cc22666501307a7a3239a6b5bd81fb93a81e15df
f462dcf75fb1bdeacff02f10777a384036aa5ab7ff147d15dc1d84c627cda719
GET /game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png?fit=192%2C192&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:04 GMT
content-type: image/webp
content-length: 7398
last-modified: Sun, 27 Aug 2023 08:56:31 GMT
expires: Tue, 26 Aug 2025 20:56:31 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2019/07/cropped-game2u-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "a100b52275355109"
vary: Accept
x-nc: HIT arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.2
200 OK 3.9 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.2
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (4076), with no line terminators
Hash 2541a2baf045e01159ee696c0811648d
b2263916a7fde84879fc3bda16095767ddf000f4
0548af9bb27732d955c46677c38cbffd67f7bcbdcf2d95797d395eefe44a6464
GET /wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.2 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Nov 2023 17:26:07 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qOaErkp%2FJGu65lZePQrp41poP6tVV3yN6wBO1waA66umrV2Gu5nhXQ3EM2L4xhQiE9zhI8U1n3gREI7j6bRmCJPSppkoF91%2BSNOa4wVAaBjOb3lUf1wxqQIknISfCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2687ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1695491526
200 OK 11 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1695491526
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash 94bc4228bb5941670e191e40a6bc44bd
ad06418894462185e7eecc1421310f552e1e5e36
5734f1b66dcb622529d435aba20990813d43553f949bc0813719b4e7d1252527
GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1695491526 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 23 Sep 2023 17:52:06 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4k1Eiy8aXWgNk5REVi89U5nQxdpLocqfteFE%2B0QgQKCVsdS3LV9gF9LXMAAlj7kP3Guje60DGnZCPkuKtYKJ7g%2FZyX0v3OGF8%2BEZL9Syau%2Bd3am5gGrifYxWA0IlkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2687bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false&ver=cd1953e27d96b3ba0ce2
200 OK 79 kB URL GET HTTP/3 game-2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false&ver=cd1953e27d96b3ba0ce2
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false&ver=cd1953e27d96b3ba0ce2 HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Cookie: _ga_17Y9MG0KT2=GS1.1.1701655807.1.0.1701655807.0.0.0; _ga=GA1.1.2077347291.1701655808; _ga_BDK88G3QWJ=GS1.1.1701655807.1.0.1701655807.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Sat, 18 Nov 2023 23:10:10 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SOsfxTGIqF8TNH1c5slVTDBZlH9qQPWTsn%2FLnE5W%2BsiBan8SPcFvH4vRi8jaY8feG7T1cwatSPJtl3zs3jHjEHTFm9y8KyaxAaJ4M7V1BnDDoigwdu2APo0FnEw%2BRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082c15e10b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
game-2u.com/wp-content/cache/wpfc-minified/201kipw/g4fzp.js
200 OK 6.2 kB URL GET HTTP/3 game-2u.com/wp-content/cache/wpfc-minified/201kipw/g4fzp.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (6324), with no line terminators
Hash b82c24118a8d68c02c17f837326d688d
20c35acc2885cc36ebea5f439f257eb0b38e0f1a
c608319c6820d93c9d88e4e218002f15b13a16a4a317a2c0e617737dab94ec19
GET /wp-content/cache/wpfc-minified/201kipw/g4fzp.js HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Thu, 28 Sep 2023 10:01:45 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OXmABTOW7Dr0lTfruviGNwS6u8yzU49Yfj0HNC41fSEwLvPaK290KelOndo8LcEpPDpEUtzK3sZndxTOUHhXyvLNxp1sDul2NNrYLjpC%2Ft7hdz6NX8LyQ0hUiL1ATA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b2485fb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155&ssl=1
200 OK 0 B URL GET HTTP/2 i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155&ssl=1
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 02:10:03 GMT
content-type: image/webp
content-length: 7712
last-modified: Sat, 11 Jun 2022 22:08:00 GMT
expires: Tue, 11 Jun 2024 10:08:00 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "416c01d7e07bbbbf"
vary: Accept
x-nc: HIT arn 7
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
game-2u.com/wp-content/themes/poster/foundation/js/foundation.min.js
200 OK 109 kB URL GET HTTP/3 game-2u.com/wp-content/themes/poster/foundation/js/foundation.min.js
IP
Requested by https://game-2u.com/2023/09/celeste-v6458966-pc.html
Certificate IssuerGoogle Trust Services LLC
Subjectgame-2u.com
Fingerprint0A:86:14:6C:24:1C:80:9D:B7:41:60:BC:D9:2A:9C:15:A6:3B:80:5B
ValiditySun, 08 Oct 2023 13:12:25 GMT - Sat, 06 Jan 2024 13:12:24 GMT
File type ASCII text, with very long lines (32072)
Size 109 kB (109037 bytes)
Hash 9f0af735cc1c2011ddd8e8a94273129a
4fced5505d621687f784e705ce3da6dd02312773
e8fa3bdea50e7c47ebbcab43cbcf073745f1eb08f1dd996781c7098ec215a488
GET /wp-content/themes/poster/foundation/js/foundation.min.js HTTP/1.1
Host: game-2u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://game-2u.com/2023/09/celeste-v6458966-pc.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 02:10:00 GMT
content-type: application/javascript
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Wed, 22 Feb 2023 09:26:36 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BULVvsFDCvD9U%2Fe8cVl3MFMnJp1HdKTmGPwuuQxk7x5rRf6TU7AG%2FuFkiXnOnwGfFbqyWrxaZnVXOa6NSW6gLR%2B7yr%2BtLVOU62VdpG0DdqHatL89Wxu2F5ngHuwZbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830082b26874b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1
213.239.209.209
192.0.76.3
139.45.197.245
104.17.25.14
0.0.0.0