Report - lysyfyj.com/http:/www.gahyqah.com/login.php

Report Overview

Visited public
2023-12-22 19:32:10
Tags
Submit Tags
URL
lysyfyj.com/http:/www.gahyqah.com/login.php
Finishing URL
www.nuggitgames.com/ngssko/no/bln8.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a#
IP / ASN
95.211.219.67
#60781 LeaseWeb Netherlands B.V.
Title
Vinn gratis spinn

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lysyfyj.com	unknown	2018-09-17	2012-07-24 11:06:35	2023-12-21 18:43:33	2.0 kB	1.6 kB	95.211.219.67
devar-akg.com	unknown	2023-12-22	2023-12-22 17:50:22	2023-12-22 17:50:22	1.7 kB	5.5 kB	3.226.230.174
web.countertrck.com	606732	2017-08-15	2017-08-18 14:06:31	2023-12-14 21:07:21	1.4 kB	1.6 kB	18.193.235.10
www.nuggitgames.com	unknown	2017-08-18	2016-09-05 11:47:23	2023-12-21 17:10:43	17 kB	252 kB	138.201.157.209
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-22 12:25:20	446 B	31 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-22	medium	lysyfyj.com	Sinkholed
2023-12-22	medium	lysyfyj.com	Sinkholed
2023-12-22	medium	lysyfyj.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-07-16
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-07-16 10:00 Times Seen4177 Hash 6fc159d00dc3cea4153c038739683f93 5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1 8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce Loading...

	www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a	ScriptElement	2.7 kB	2023-03-07	2024-08-20
Pretty URL www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a IP 138.201.157.209 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02 Last Seen2024-08-20 17:27 Times Seen17 Hash 88d4a621b6403051bf33f027a20fc484 ffd5167e4c0abd7bc53ae97f3c7980f5f5457850 04bf9d8d09980d28754c15ab7c48f456b36a9fbc653290879e1ea69db7c59bff Loading...

	www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a	ScriptElement	981 B	2023-03-07	2024-08-20
Pretty URL www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a IP 138.201.157.209 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2024-08-20 17:27 Times Seen17 Hash e1c712bbf0d369735fe582aa028f8e2e 4577d00199c650eef3a87f60178ecf4160a7ab14 7556078f5ea4caf187f2f69e8d6b0146bc702d9f0f28c774babff3b1a5035996 Loading...

	www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a	ScriptElement	1.4 kB	2023-03-08	2024-08-20
Pretty URL www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a IP 138.201.157.209 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:44 Last Seen2024-08-20 17:27 Times Seen17 Hash 753ec151cca90efd0197d9a637001dd4 bdba281dcf8686a84bf6e581124cbe0d7429b9a7 225cc655a78d4b3077d5b18e597b6840798dbbaca0901a66636d7de2014cd5cc Loading...

	www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a	ScriptElement	221 B	2023-05-09	2024-08-20
Pretty URL www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a IP 138.201.157.209 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-09 14:02 Last Seen2024-08-20 17:27 Times Seen17 Hash 3679ea5fc42b6f452c370d4fb03585f7 9d9f5ecae4f87ff513da7465e5749d23bfef0e77 022d3c7c2a49871c8eeeefaf1db3a0d704b6574c78ba5538cd07ac10ec30d29d Loading...

	www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a	ScriptElement	202 B	2023-03-07	2025-07-14
Pretty URL www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a IP 138.201.157.209 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-07-14 15:14 Times Seen26 Hash 5bc64eee70b910ed4d235b6e496b133c caff534c56dbb08fb0d57addb60dfe05ccaa1cf6 c3c9847b107d9f01b3b016bc6e644a68a78073115672ca17e71ad734d1e2d88d Loading...

	unknown	DomTimer	406 B	2023-04-13	2024-08-21
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-04-13 04:50 Last Seen2024-08-21 08:09 Times Seen61 Hash bca4fd013a0728803f3a2cadf5146385 c27e0888cf8e2d3681edd56b459dfc6d3111b712 b581610c241b9ccf689e35ffb3b1d65cb5838349e9c10f5ab9493d9d73c6ddb1 Loading...

HTTP Transactions (24)

URL IP Response Size

lysyfyj.com/http:/www.gahyqah.com/login.php

95.211.219.67

504 B

URL
lysyfyj.com/http:/www.gahyqah.com/login.php
IP
95.211.219.67:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
HTML document, ASCII text, with very long lines (504), with no line terminators
Size
504 B (504 bytes)
Hash
7d067cc4e54438ae4eb5ff8a283bf08e
37ebbe0a42c1dd537ea2a0e2ab7e3871650c97bf
daa610db5d9d6fe292fa019f3a44b7ccf6438e398a6dc1a1dfbfd8b9ba4dcdf6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /http:/www.gahyqah.com/login.php HTTP/1.1
Host: lysyfyj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
content-length: 504
content-type: text/html; charset=utf-8
date: Fri, 22 Dec 2023 19:31:44 GMT
server: Cowboy
set-cookie: sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b; path=/; domain=.lysyfyj.com; expires=Wed, 09 Jan 2092 22:45:51 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2

lysyfyj.com/favicon.ico

95.211.219.67

9 B

URL
lysyfyj.com/favicon.ico
IP
95.211.219.67:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lysyfyj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyfyj.com/http:/www.gahyqah.com/login.php
Cookie: sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: max-age=0, private, must-revalidate
content-length: 9
date: Fri, 22 Dec 2023 19:31:44 GMT
server: Cowboy
X-Firefox-Spdy: h2

lysyfyj.com/http:/www.gahyqah.com/login.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcwMzI4MDcwNCwiaWF0IjoxNzAzMjczNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydWhqc2VqaWVqY2VyYWxxcG8wOWd0a2MiLCJuYmYiOjE3MDMyNzM1MDQsInRzIjoxNzAzMjczNTA0ODI1MzkyfQ.NlJhoV-YH6qN7TJJd8i77RYoIABcD2aOKVzTZKabbp4&sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b

95.211.219.67

11 B

URL
lysyfyj.com/http:/www.gahyqah.com/login.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcwMzI4MDcwNCwiaWF0IjoxNzAzMjczNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydWhqc2VqaWVqY2VyYWxxcG8wOWd0a2MiLCJuYmYiOjE3MDMyNzM1MDQsInRzIjoxNzAzMjczNTA0ODI1MzkyfQ.NlJhoV-YH6qN7TJJd8i77RYoIABcD2aOKVzTZKabbp4&sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b
IP
95.211.219.67:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
ASCII text, with no line terminators
Size
11 B (11 bytes)
Hash
32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /http:/www.gahyqah.com/login.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcwMzI4MDcwNCwiaWF0IjoxNzAzMjczNTA0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydWhqc2VqaWVqY2VyYWxxcG8wOWd0a2MiLCJuYmYiOjE3MDMyNzM1MDQsInRzIjoxNzAzMjczNTA0ODI1MzkyfQ.NlJhoV-YH6qN7TJJd8i77RYoIABcD2aOKVzTZKabbp4&sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b HTTP/1.1
Host: lysyfyj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyfyj.com/http:/www.gahyqah.com/login.php
Cookie: sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Fri, 22 Dec 2023 19:31:44 GMT
location: http://devar-akg.com/zclkvisitor/bdca0771-a100-11ee-a619-12de02d10b6b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
server: Cowboy
set-cookie: sid=bd9bbaa9-a100-11ee-8cce-feedb74ed54b; path=/; domain=.lysyfyj.com; expires=Wed, 09 Jan 2092 22:45:52 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2

devar-akg.com/zclkvisitor/bdca0771-a100-11ee-a619-12de02d10b6b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c

3.226.230.174

1.1 kB

URL
devar-akg.com/zclkvisitor/bdca0771-a100-11ee-a619-12de02d10b6b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
IP
3.226.230.174:0
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text
Size
1.1 kB (1102 bytes)
Hash
20fa141bf1c43f2ec3c9bb72b18a665a
e0f0ca89e445fbdf070d1d1f204b642e73d611ef
b44511a3ef32de85d7f2394ef82d4eff82b3f980ed557cb166a36e54b527782d

HTTP Headers

GET /zclkvisitor/bdca0771-a100-11ee-a619-12de02d10b6b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c HTTP/1.1
Host: devar-akg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 22 Dec 2023 19:31:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: cshvGQqc

devar-akg.com/zclkredirect?visitid=bdca0771-a100-11ee-a619-12de02d10b6b&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false

3.217.193.105

1.9 kB

URL
devar-akg.com/zclkredirect?visitid=bdca0771-a100-11ee-a619-12de02d10b6b&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
IP
3.217.193.105:0
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text, with very long lines (916)
Size
1.9 kB (1918 bytes)
Hash
2109a3c4de26b974730a53dc5c221e27
8ee6e7aba1a4b77ad23144041afe0daed893c91e
61ba1868e2dbccaf768834d475182427ccb9365ef556904fd337653bd050b3b1

HTTP Headers

GET /zclkredirect?visitid=bdca0771-a100-11ee-a619-12de02d10b6b&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: devar-akg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://devar-akg.com/zclkvisitor/bdca0771-a100-11ee-a619-12de02d10b6b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5dbc150-6f19-11e8-9eb3-0e497388635c
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Date: Fri, 22 Dec 2023 19:31:46 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: AyjuYpMu

devar-akg.com/favicon.ico

3.217.193.105

653 B

URL
devar-akg.com/favicon.ico
IP
3.217.193.105:0
ASN
#14618 AMAZON-AES

File type
HTML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Size
653 B (653 bytes)
Hash
ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: devar-akg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://devar-akg.com/zclkredirect?visitid=bdca0771-a100-11ee-a619-12de02d10b6b&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 
Date: Fri, 22 Dec 2023 19:31:46 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: drjCZCiA

GET web.countertrck.com/zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngssko%2Fno%2Findex-uni.html%3Fcep%3DIB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw%26lptoken%3D172f03d127c85357063a&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=bdca0771-a100-11ee-a619-12de02d10b6b&cid=&rt=R&ts=1703273506663&hash=JxbTEYITd08xo-Ge4KSXGvhOUlxIGpJwfmU7-chuL0Q

18.193.235.10

302 Found

0 B

URL User Request GET HTTP/2
web.countertrck.com/zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngssko%2Fno%2Findex-uni.html%3Fcep%3DIB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw%26lptoken%3D172f03d127c85357063a&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=bdca0771-a100-11ee-a619-12de02d10b6b&cid=&rt=R&ts=1703273506663&hash=JxbTEYITd08xo-Ge4KSXGvhOUlxIGpJwfmU7-chuL0Q
IP
18.193.235.10:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectweb.countertrck.com
FingerprintF4:B6:27:82:99:68:B6:E3:D2:07:15:E7:F5:0D:86:84:27:75:B6:0D
ValidityFri, 10 Nov 2023 06:55:50 GMT - Thu, 08 Feb 2024 06:55:49 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /zp-redirect?target=https%3A%2F%2Fwww.nuggitgames.com%2Fngssko%2Fno%2Findex-uni.html%3Fcep%3DIB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw%26lptoken%3D172f03d127c85357063a&caid=53c8519d-dbda-48a9-b0f2-6aadb0b9a2c6&zpid=bdca0771-a100-11ee-a619-12de02d10b6b&cid=&rt=R&ts=1703273506663&hash=JxbTEYITd08xo-Ge4KSXGvhOUlxIGpJwfmU7-chuL0Q HTTP/1.1
Host: web.countertrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://devar-akg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 22 Dec 2023 19:31:46 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
pragma: no-cache
set-cookie: cep-v4=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw; Max-Age=86400; Expires=Sat, 23-Dec-2023 19:31:46 GMT; Domain=web.countertrck.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a

138.201.157.209

200 OK

19 kB

URL User Request GET HTTP/2
www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2104)
Size
19 kB (18603 bytes)
Hash
e9b98f6b3739062a2325f038515d9fed
a745d83929f97db5e822734e3d5334e408e39314
9325262ba957b0b153fa16fcb0d6ac879923b2654b2d5295daaefbba3852cc87

HTTP Headers

GET /ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://devar-akg.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
x-mod-pagespeed: 1.14.36.1-0
cache-control: max-age=0, no-cache, s-maxage=10
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-robots-tag: noindex, noarchive, nosnippet
content-length: 18603
content-type: text/html; charset=UTF-8
date: Fri, 22 Dec 2023 19:31:47 GMT
server: Apache
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/NO.png

138.201.157.209

200 OK

1.2 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/NO.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 50 x 40, 8-bit colormap, non-interlaced
Size
1.2 kB (1182 bytes)
Hash
1dbbdc570a6ab11660aae86783af4b21
c16bacdbf508f6896d590f482d79ce1e62c2d63a
4c7188a23412702bfc654a613cc7bcb30182265f832d60fbb667b35b1b75d27c

HTTP Headers

GET /ngssko/no/images/NO.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 1182
last-modified: Sat, 08 Feb 2020 05:04:31 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:05 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-HbvcVwpqsR"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/style.css

138.201.157.209

200 OK

2.8 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/style.css
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
ASCII text
Size
2.8 kB (2777 bytes)
Hash
13385118a26c69b8fa492dd7dc703354
c3a9ce0d208bfaa6ae10c9c803c009f7179d2e09
bf1a1d18310dd4aa6d9f193fc50694cefb80c766309d5819993abe4fd06499f4

HTTP Headers

GET /ngssko/no/style.css HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 2777
server: Apache
last-modified: Sat, 08 Feb 2020 05:04:25 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
x-robots-tag: noindex, noarchive, nosnippet
expires: Sat, 20 Jan 2024 13:58:04 GMT
etag: W/"PSA-EzhRGKJsab"
x-original-content-length: 13007
content-encoding: gzip
cache-control: max-age=2592000, s-maxage=10
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/slot-start.png

138.201.157.209

200 OK

26 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/slot-start.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Size
26 kB (26084 bytes)
Hash
f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d

HTTP Headers

GET /ngssko/no/images/slot-start.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 26084
last-modified: Sat, 08 Feb 2020 05:04:44 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:05 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-9JFkdVbkkt"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/slot-result-1.png

138.201.157.209

200 OK

20 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/slot-result-1.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Size
20 kB (20370 bytes)
Hash
1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963

HTTP Headers

GET /ngssko/no/images/slot-result-1.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 20370
last-modified: Sat, 08 Feb 2020 05:04:34 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:05 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-H70rJuYSNt"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/slot-spin.gif

138.201.157.209

200 OK

88 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/slot-spin.gif
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
GIF image data, version 89a, 410 x 279
Size
88 kB (87599 bytes)
Hash
617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e

HTTP Headers

GET /ngssko/no/images/slot-spin.gif HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 87599
last-modified: Sat, 08 Feb 2020 05:04:41 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:05 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-YXwWxeBMhg"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/gif
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/slot-result-2.png

138.201.157.209

200 OK

27 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/slot-result-2.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Size
27 kB (26733 bytes)
Hash
b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435

HTTP Headers

GET /ngssko/no/images/slot-result-2.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 26733
last-modified: Sat, 08 Feb 2020 05:04:37 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:06 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-tsoL_qTQzs"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/images/slot-win.png

138.201.157.209

200 OK

14 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/images/slot-win.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Size
14 kB (14391 bytes)
Hash
939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837

HTTP Headers

GET /ngssko/no/images/slot-win.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 14391
last-modified: Sat, 08 Feb 2020 05:04:47 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:06 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-k5tqc8ljg6"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/red-arrow-right.png

138.201.157.209

200 OK

1.4 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/red-arrow-right.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Size
1.4 kB (1362 bytes)
Hash
881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f

HTTP Headers

GET /ngssko/no/red-arrow-right.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 1362
last-modified: Sat, 08 Feb 2020 05:04:23 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:06 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-iBvcA3voiV"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/red-arrow-left.png

138.201.157.209

200 OK

1.3 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/red-arrow-left.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Size
1.3 kB (1334 bytes)
Hash
92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef

HTTP Headers

GET /ngssko/no/red-arrow-left.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 1334
last-modified: Sat, 08 Feb 2020 05:04:20 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:06 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-ktPkgsrOqF"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/alert.ogg

138.201.157.209

206 Partial Content

6.1 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/alert.ogg
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
Ogg data, Vorbis audio, mono, 44100 Hz, ~70000 bps, created by: Xiph.Org libVorbis I (1.3.2)
Size
6.1 kB (6061 bytes)
Hash
c24ec40453460f0d5617767016ebc7fe
c360aea4f0d0a34920ddacd376503734142438b9
6c24b85e36500836887748ab5fcfa2663bd6ab39d28f73e75aa5a669bf9386cb

HTTP Headers

GET /ngssko/no/alert.ogg HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:11 GMT
accept-ranges: bytes
content-length: 6061
cache-control: max-age=172800, s-maxage=10
expires: Sun, 24 Dec 2023 19:31:47 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-6060/6061
content-type: audio/ogg
date: Fri, 22 Dec 2023 19:31:47 GMT
server: Apache
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/sounds/win.mp3

138.201.157.209

206 Partial Content

10 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/sounds/win.mp3
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 32 kbps, 32 kHz, Monaural
Size
10 kB (10391 bytes)
Hash
bca40777013dec4a99eaa8b0b98a7fef
bc1c833577a1dcd82ad01a90e82898bc7b47cad7
635e9ee8fcd18bd4c3ae173f00f4c5cbf15ee90a27a302440e2e77c371314176

HTTP Headers

GET /ngssko/no/sounds/win.mp3 HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:54 GMT
accept-ranges: bytes
content-length: 10391
cache-control: max-age=172800, s-maxage=10
expires: Sun, 24 Dec 2023 19:31:47 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-10390/10391
content-type: audio/mpeg
date: Fri, 22 Dec 2023 19:31:47 GMT
server: Apache
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/sounds/spin.mp3

138.201.157.209

206 Partial Content

8.8 kB

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/sounds/spin.mp3
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
MPEG ADTS, layer III, v2, 32 kbps, 16 kHz, JntStereo
Size
8.8 kB (8784 bytes)
Hash
5a2e10964c7fea8b0181831184bc0d97
8f5233dd6be372e7749c6cd8440db5b43de5a9c9
9b8fa3d6ccb98804102ffd59ee70c19e5d7ca7efabbe6c0d4471a1935348ee3d

HTTP Headers

GET /ngssko/no/sounds/spin.mp3 HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
last-modified: Sat, 08 Feb 2020 05:04:51 GMT
accept-ranges: bytes
content-length: 8784
cache-control: max-age=172800, s-maxage=10
expires: Sun, 24 Dec 2023 19:31:47 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
content-range: bytes 0-8783/8784
content-type: audio/mpeg
date: Fri, 22 Dec 2023 19:31:47 GMT
server: Apache
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/arrow.png

138.201.157.209

200 OK

154 B

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/arrow.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 12 x 12, 4-bit colormap, non-interlaced
Size
154 B (154 bytes)
Hash
4daf12b0677dd9ae8923d3154187d1d8
d20e8f0a0c1a72d20cd421ba5e162ff938896e51
5351d7b058d47812c8a2c74bccef9389a11e3df9cd19874d95b7000c8ab9ea9e

HTTP Headers

GET /ngssko/no/arrow.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 154
last-modified: Sat, 08 Feb 2020 05:04:13 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 13:58:06 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-Ta8SsGd92a"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

GET ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js

142.250.74.138

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT

File type
ASCII text, with very long lines (32069)
Size
30 kB (30089 bytes)
Hash
6fc159d00dc3cea4153c038739683f93
5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1
8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce

HTTP Headers

GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30089
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 16 Dec 2023 16:14:16 GMT
expires: Sun, 15 Dec 2024 16:14:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 530251
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET www.nuggitgames.com/ngssko/no/favicon.png

138.201.157.209

200 OK

805 B

URL GET HTTP/2
www.nuggitgames.com/ngssko/no/favicon.png
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Size
805 B (805 bytes)
Hash
496b2b04c683aa1aee40aea9b8a9bd2b
e248732ed7105d6e618436ed2dad8556239243a1
ac90a1d4eed03e30376b0d3f7529652269e51bc2b0455797cb1acb34941f9ec2

HTTP Headers

GET /ngssko/no/favicon.png HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 805
last-modified: Sat, 08 Feb 2020 05:04:15 GMT
accept-ranges: bytes
expires: Fri, 20 Dec 2024 14:22:04 GMT
x-robots-tag: noindex, noarchive, nosnippet
vary: User-Agent
server: Apache
cache-control: max-age=31536000
etag: W/"PSA-SWsrBMaDqh"
date: Fri, 22 Dec 2023 19:31:47 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2

138.201.157.209

200 OK

19 kB

URL User Request GET HTTP/2
www.nuggitgames.com/ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a
IP
138.201.157.209:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerLet's Encrypt
Subjectnuggitgames.com
FingerprintB2:C6:44:A3:C4:30:52:DB:11:13:43:C8:5F:49:04:DA:79:9A:1C:9D
ValiditySat, 11 Nov 2023 12:52:31 GMT - Fri, 09 Feb 2024 12:52:30 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2104)
Size
19 kB (18624 bytes)
Hash
1e40c9afa65e4a8efc8ee96bea9a9ec4
ee343e84157c3ff1d84ec59cc5bd341390a9be10
b95dfed1760d0309cd68c328bd7e6b29c19e800622fef97ef523ed1a43fbe3ea

HTTP Headers

GET /ngssko/no/index-uni.html?cep=IB3bRZOBsuHe4DlDjlz_ngAiXyhjpWYra4uKTJPLS5KWudZwws0bou08OjKIwxfzvlH6g0FHbCF15_z-n7vhEM599znLbwjjyVNVp_aSIDjw-afZKl8m-78mq5zvyiqvlibsGlqqGf0IAuC1ZlRah_EJSOm0t5WB_fu3Wu07WKkU3rZoYv-bv6yl8NOYovi-EoA7T7ileKDYE7ARlLbbd_kPWBXqUjCaROMyY06QehVm0cfdXhZ49LZ3deDThykZOpOyFaBO2egy_uVZfPuj0RVqPPAJcl02wEt543WOnGZq4snYjXf0JLj-kajj6ZogOly45yof30gX4TJO-_59ExEBh3slrEJ2po2sKiQitnvMu8g5tZNgWEL5xqfYqCJyH86R9LN5G5MjDgrB4iwTULysazgUur7b7DBsvuV_pQM4_i9kdQjc7mP4s9VOoLaAaHn-eBRppKrXTdvfjMkdgfu7hGp0aicJdg4yEfqjDpuVDFYJoYxAp2073JGzYYFwfGOVrnYGJMpebVftToaO3CM-g1FOJ_Q49LRRtC_LiCw&lptoken=172f03d127c85357063a HTTP/1.1
Host: www.nuggitgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
x-mod-pagespeed: 1.14.36.1-0
cache-control: max-age=0, no-cache, s-maxage=10
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-robots-tag: noindex, noarchive, nosnippet
content-length: 18624
content-type: text/html; charset=UTF-8
date: Fri, 22 Dec 2023 19:32:08 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type