Overview

URLcoinfest-team.asia/
IP 192.64.119.89 (United States)
ASN#22612 NAMECHEAP-NET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 14:23:15 UTC
StatusLoading report..
IDS alerts5
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
js.parkingcrew.net (4) 94546 2017-01-29 18:23:38 2023-05-26 05:11:28 1898 4937 185.53.178.30
afs.googleusercontent.com (2) 12123 2013-05-06 21:11:00 2023-05-26 05:09:12 967 2088 142.250.74.97
coinfest-team.asia (2) 0 2023-02-20 04:18:03 2023-04-05 21:59:42 662 594 192.64.119.89
www.coinfest-team.asia (3) 0 2023-02-20 04:18:03 2023-02-20 04:18:03 1029 4477 198.54.117.211
i.cdnpark.com (3) 93792 2014-04-23 00:29:22 2019-03-24 18:17:58 1098 8424 54.230.111.81
parkingcrew.net (1) 54699 2013-04-19 03:41:17 2019-03-28 08:53:22 391 3906 185.53.179.29
d38psrni17bvxu.cloudfront.net (1) 0 2022-09-22 18:48:38 2023-05-26 08:56:12 351 6090 54.230.245.138
www.google.com (8) 7 2015-05-10 13:11:19 2023-05-26 09:14:50 5251 119553 142.250.74.132

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-05-26 14:23:01 UTC medium Client IP  192.64.119.89 ET INFO HTTP Request to a *.asia domain 
2023-05-26 14:23:01 UTC medium Client IP  198.54.117.211 ET INFO HTTP Request to a *.asia domain 
2023-05-26 14:23:04 UTC medium Client IP  192.64.119.89 ET INFO HTTP Request to a *.asia domain 
2023-05-26 14:23:06 UTC medium Client IP  198.54.117.216 ET INFO HTTP Request to a *.asia domain 
2023-05-26 14:23:11 UTC low  192.64.119.89 Client IP ET INFO Namecheap URL Forward 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 192.64.119.89
Date UQ / IDS / BL URL IP
2023-05-26 14:23:15 UTC 0 - 5 - 0 coinfest-team.asia/ 192.64.119.89
2023-05-17 11:49:52 UTC 0 - 2 - 0 data-analyticsdegree.com/gg04/ 192.64.119.89
2023-05-15 15:21:44 UTC 0 - 0 - 2 blackdrop.site/ 192.64.119.89
2023-04-27 09:45:56 UTC 0 - 1 - 0 kosarasauto.com/ 192.64.119.89
2023-04-18 06:50:11 UTC 0 - 1 - 0 mafia88.club/ 192.64.119.89


Last 5 reports on ASN: NAMECHEAP-NET
Date UQ / IDS / BL URL IP
2023-06-05 23:30:21 UTC 0 - 0 - 2 26motor.net/wp-includes/auth/new/sf_rand_stri (...) 162.0.217.66
2023-06-05 23:25:46 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:54:29 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:47:32 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:47:28 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9


Last 1 reports on domain: coinfest-team.asia
Date UQ / IDS / BL URL IP
2023-05-26 14:23:15 UTC 0 - 5 - 0 coinfest-team.asia/ 192.64.119.89


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-06-02 10:45:11 UTC 0 - 2 - 0 gamikoana.website/ 192.64.119.68
2023-06-01 16:23:21 UTC 0 - 2 - 0 social-followers.store/ 162.255.119.166
2023-05-31 02:53:56 UTC 0 - 2 - 0 cbp-au.com 162.255.119.147
2023-05-30 23:41:29 UTC 0 - 13 - 0 use4waynews.world/ 162.255.119.81
2023-05-29 15:46:13 UTC 0 - 1 - 0 wordbone.com/ 192.64.119.15

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (4)
#1 JavaScript::Write (size: 88) - SHA256: 9b3e5b0d0240e600f7ddf3c50decf1920acc8aa95234773b18a9dc0b9d4d9e22
< script src = "http://js.parkingcrew.net/assets/scripts/registrar-caf/243142.js" > < /script>
#2 JavaScript::Write (size: 144) - SHA256: 030ea8e99aa0a3a9c240e2c3dd9051c6407fd09a41d519500323f03a74e84213
< script src = "http://parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.coinfest-team.asia&_t=1685110986533"
type = "text/javascript" > < /script>
#3 JavaScript::Write (size: 69) - SHA256: c321c2a6c6bf4db2cc23a72b8df7734b0da497fae55543b1606d1fdffbc70a68
< script src = "//www.google.com/adsense/domains/caf.js?abp=1" > < /script>
#4 JavaScript::Write (size: 76) - SHA256: 6f9c01bfa9404b8a13f98b0befe67694ae9e479f6b1066c1779d1c737af78231
< script src = "//d38psrni17bvxu.cloudfront.net/scripts/jsparkcaf.js" > < /script>


HTTP Transactions (24)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: coinfest-team.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.64.119.89
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                            
Date: Fri, 26 May 2023 14:23:01 GMT
Content-Length: 53
Connection: keep-alive
Location: http://www.coinfest-team.asia/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   53
Md5:    cf4d08ddee0ce89c67681efc7de15a75
Sha1:   0faf61b5fe3caa523a10be60d596b584d080c6e9
Sha256: bd3fe12404763f01e3f4ef4d9224546987a5e4edce169981016e1f5c3af0d729

IDS:
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO Namecheap URL Forward
                                        
                                            GET / HTTP/1.1 
Host: www.coinfest-team.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             198.54.117.211
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Date: Fri, 26 May 2023 14:23:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: namecheap-nginx
X-CST: HIT, HIT
Allow: GET, HEAD
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319), with CRLF line terminators
Size:   1929
Md5:    6a76d62745b554d090ce0bdb6a33eb56
Sha1:   ce992254ac68832f68f76b9cdd60935bc20037b2
Sha256: 83406683297b79cd03347a0134fd1e6066900d1e57c33c466dea8e9cd94cfe38

IDS:
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO HTTP Request to a *.asia domain
                                        
                                            GET / HTTP/1.1 
Host: coinfest-team.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.64.119.89
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                            
Date: Fri, 26 May 2023 14:23:04 GMT
Content-Length: 53
Connection: keep-alive
Location: http://www.coinfest-team.asia/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   53
Md5:    cf4d08ddee0ce89c67681efc7de15a75
Sha1:   0faf61b5fe3caa523a10be60d596b584d080c6e9
Sha256: bd3fe12404763f01e3f4ef4d9224546987a5e4edce169981016e1f5c3af0d729

IDS:
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO Namecheap URL Forward
                                        
                                            GET / HTTP/1.1 
Host: www.coinfest-team.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             198.54.117.216
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Date: Fri, 26 May 2023 14:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: namecheap-nginx
X-CST: MISS, HIT
Allow: GET, HEAD
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319), with CRLF line terminators
Size:   1929
Md5:    6a76d62745b554d090ce0bdb6a33eb56
Sha1:   ce992254ac68832f68f76b9cdd60935bc20037b2
Sha256: 83406683297b79cd03347a0134fd1e6066900d1e57c33c466dea8e9cd94cfe38

IDS:
  - ET INFO HTTP Request to a *.asia domain
  - ET INFO HTTP Request to a *.asia domain
                                        
                                            GET /themes/assets/style.css HTTP/1.1 
Host: i.cdnpark.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.111.81
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 28 Nov 2022 10:41:35 GMT
Content-Encoding: gzip
Date: Fri, 26 May 2023 03:23:50 GMT
ETag: W/"6384905f-37c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A9k1aced3f_7CAZPWwZ34-s5uyUqj6R3xu_IqCa7FLmtbpPOVH85PA==
Age: 39597


--- Additional Info ---
Magic:  ASCII text
Size:   359
Md5:    e42aacc9e34f351a935e6e83f2cb4a05
Sha1:   539587b5cb2e9383fbf115c0f7f99406079341f9
Sha256: 9cb157f272caecfbd484a0e3b6a8e2f7821e78c6422653ef83530ed9f73b607b
                                        
                                            GET /themes/registrar/style_namecheap.css HTTP/1.1 
Host: i.cdnpark.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.111.81
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
Date: Fri, 26 May 2023 04:58:19 GMT
ETag: W/"5ebab1f0-fa0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p7xmXu1_S8YL677ky94fqKn_ZCrEM_8qhVx6pUfJ_TKb1VcPQxpJsw==
Age: 33946


--- Additional Info ---
Magic:  ASCII text, with very long lines (1313)
Size:   1769
Md5:    fcfbf44db7a3eca961510e9df77868bf
Sha1:   c378750ca8a6119c78bffa548104947a42edb2df
Sha256: 8cf5887217a8a780e49a5c6ce3773c70e79b33429212ef3325d8f6e0094a0899
                                        
                                            GET /themes/registrar/images/logo_namecheap.png HTTP/1.1 
Host: i.cdnpark.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.111.81
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Content-Length: 4917
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Accept-Ranges: bytes
Date: Fri, 26 May 2023 04:58:19 GMT
ETag: "5ebab1f0-1335"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: l16BwiFRpTP-HVS40n1FTFyFgZ8ULitOP1GPC5J4lyDT9MVfQ849oQ==
Age: 33948


--- Additional Info ---
Magic:  PNG image data, 260 x 60, 8-bit colormap, non-interlaced\012- data
Size:   4917
Md5:    24cfc82dfacb3ecc2e1ba6600391576d
Sha1:   49eaca85596996a749c9d7407189fdb86845667e
Sha256: 903046ac1355826e49c089ca2dd88c720bff908adb1760ee6e1884755b6041f1
                                        
                                            GET /jsparkcaf.php?regcn=243142&_v=2&_h=www.coinfest-team.asia&_t=1685110986533 HTTP/1.1 
Host: parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.53.179.29
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                            
Server: nginx
Date: Fri, 26 May 2023 14:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Language: norwegian
X-Domain: coinfest-team.asia
X-Subdomain: www
X-Template: tpl_CleanPeppermintBlack_twoclick


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2989)
Size:   3621
Md5:    2fd4b731e902fbc4095406cd38a5c7ae
Sha1:   18b85a390fb74852afdcf5a700270cc5d125d4b3
Sha256: 5b8f11cb0df1ddd2ea443ff325050737573e2dc6b534e7b969002c56f42e96a2
                                        
                                            GET /scripts/jsparkcaf.js HTTP/1.1 
Host: d38psrni17bvxu.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.138
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 5638
Connection: keep-alive
Server: nginx
Date: Fri, 26 May 2023 00:56:28 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Accept-Ranges: bytes
ETag: "5ebab1f0-1606"
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JlAfQmlSy8aVx5-JldmWLnqshtax_alW8oEonYzCqRggAZD5CTT7QA==
Age: 48398


--- Additional Info ---
Magic:  ASCII text
Size:   5638
Md5:    6f95d346f97b06c2d81a5cb147d35de0
Sha1:   c591eaa19ed0d227b4555f5e699b668b05aa40b0
Sha256: 35ca990c39f9194a5a17ff664a0fdcc7dfb6cb433ea6844e2960d9744bd9b9b6
                                        
                                            GET /adsense/domains/caf.js?abp=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                            
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Fri, 26 May 2023 14:23:06 GMT
Expires: Fri, 26 May 2023 14:23:06 GMT
Cache-Control: private, max-age=3600
ETag: "1191932228224773569"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (2125)
Size:   53769
Md5:    8d684f66adf17aa00306695249b7be57
Sha1:   e7741f02232c5862c6ed469116adc3c235b81e95
Sha256: cdbd80fb34dd7609fce16a6b9398be8c1926687eab7aa32e07953e83f12ae276
                                        
                                            GET /ls.php?t=6470c0ca&token=deed72919f47d13c9bec6ec5342592499160b908 HTTP/1.1 
Host: js.parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.coinfest-team.asia
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.53.178.30
HTTP/1.1 201 Created
Content-Type: text/javascript;charset=UTF-8
                                            
Server: nginx
Date: Fri, 26 May 2023 14:23:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 6470c0cb785a1c14472e69f7
Charset: utf-8
Access-Control-Allow-Origin: http://www.coinfest-team.asia
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_e9GvOTNAvt0FJZH15E6ZJDPKK3P0Y23fZL6iT6M2E4N0Hrbn9i5P/7k84Ux1/M7wbeTJC7QNZTV6x1wpnErJtw==


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   16
Md5:    7363e85fe9edee6f053a4b319588c086
Sha1:   a15e2127145548437173fc17f3e980e3f3dee2d0
Sha256: c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
                                        
                                            GET /track.php?domain=coinfest-team.asia&toggle=browserjs&uid=MTY4NTExMDk4Ni45MjM3OjJhNGY0NDg2MTE1YTZmYWQ4YzU3NTZmYjFlNjg0YWY4ZTNiMDk2MDAwNTA4NTEzODk1YmUwOGYxMzQ4MjY5NTY6NjQ3MGMwY2FlMTgyZA%3D%3D HTTP/1.1 
Host: js.parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.coinfest-team.asia
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.53.178.30
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Fri, 26 May 2023 14:23:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, max speed, from Unix\012- data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
                                        
                                            GET /assets/scripts/registrar-caf/243142.js HTTP/1.1 
Host: js.parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.53.178.30
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Fri, 26 May 2023 14:23:07 GMT
Content-Length: 2994
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-bb2"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2994
Md5:    23316d6bbbe4b9d7c85945ce4c9428e5
Sha1:   f7c03d2a03416a697d658cf799620684f958664b
Sha256: 119710c0d9e01024bc9d65493a77b661196c02706ce008f5152f78b3c224a981
                                        
                                            GET /afs/ads/i/iframe.html HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: text/html
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: script-src 'nonce-tAGBivah556gqojeOGe6TQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 727
date: Fri, 26 May 2023 14:23:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Mon, 18 Oct 2021 14:30:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1559)
Size:   727
Md5:    ae2e698844de27ea10ce2e6eb4b49520
Sha1:   e60fbfb4174e531243cd77bfec0c671553050ae1
Sha256: 7000f27ec550b5329002306de51f3c8bd1caf92eb8285ca4d7d95199bb66285f
                                        
                                            GET /afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.coinfest-team.asia%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404&format=r10%7Cs&nocache=8081685110987656&num=0&output=afd_ads&domain_name=www.coinfest-team.asia&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685110987663&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=534159633&uio=--&cont=tc_holder1&jsid=caf&jsv=534159633&rurl=http%3A%2F%2Fwww.coinfest-team.asia%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
content-disposition: inline
date: Fri, 26 May 2023 14:23:08 GMT
expires: Fri, 26 May 2023 14:23:08 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-umJrw_5eX2DBpdlaNMyTTg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 3024
x-xss-protection: 0
set-cookie: NID=511=p-mjGFOh2H4icp63oewVMSzDSq_l6c15hHa31msq_AiyiaCq3ZeZnbuMvVllTRmXKhTUP0YGsKmPoAWJ1POuG90Rck25S2S8i3yz2kK0J_5nacPxyS8GOHEHNKKDpk8c2yOnorGimyRoT96Rojp2yfbmoukJpc6mGhVXwsUuoZQ; expires=Sat, 25-Nov-2023 14:23:08 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+724; expires=Sun, 25-May-2025 14:23:08 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7431)
Size:   3024
Md5:    9534fdb862f507ae9a0797fd18156ba2
Sha1:   0ad82932f3ebd87893928f1556955adf1d77af62
Sha256: e652c96073c2cb5fa6ba337f77ccef28e7a44b9e3db90e02c12420248cc64c93
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 26 May 2023 14:23:08 GMT
expires: Fri, 26 May 2023 14:23:08 GMT
cache-control: private, max-age=3600
etag: "522312598558686774"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  ASCII text, with very long lines (2125)
Size:   53771
Md5:    ba14d2be5e6250fd530331e1452ff2b4
Sha1:   fc5b18f25c11b2f3079f46c601bbcba1bb1226f2
Sha256: afabc2eb29fe9571addda23feeff6993e0dc7bf26eeaba3a292317aea02c30de
                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 273
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 13:04:20 GMT
expires: Sat, 27 May 2023 12:04:20 GMT
cache-control: public, max-age=82800
age: 4728
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   273
Md5:    6751e07e0f93bd43ab90822f4b2eb62a
Sha1:   d1d0c6f0b4697b0a4e61ffbf171e8c60eac7c832
Sha256: ff563f41765da081fe9fd40e8bb33a623df033b10050a8ae8c1b46e15107d8f1
                                        
                                            GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2 HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 01:02:53 GMT
expires: Sat, 27 May 2023 00:02:53 GMT
cache-control: public, max-age=82800
age: 48015
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   174
Md5:    fc4487156e15233887a05c4c4e2744c9
Sha1:   2ad35bbfb0d2bb500a4f1fcd678477d7b01ce6a2
Sha256: 93fad9e8b746119c723b0f0f470ac4eeb2f336bad98295bec7fd28d185a10ddb
                                        
                                            GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=opf2pcke22pf&aqid=zMBwZJmbA6aKiM0Poq6p2AU&pbt=bs&adbx=280&adby=169&adbh=594&adbw=720&adbah=56%2C56%2C56%2C56%2C56%2C56%2C56%2C56%2C56%2C56&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=534159633&csala=17%7C0%7C333%7C218%7C336&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-jXqA4fRPQM9PGtnIydrBKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 14:23:10 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=t-bW_ag2BGFB6A7tDVuvCgTJHnnx5buq8HKteArN3WjheAuNNUSLE8biUR3OxYYHu6bJJudPqiOwWMnti0e8JBfdVQeoz7UtNhlvDrb-qgYxBnKw36ASTzASHZERysc85U_Wbhqb7jZq5ftTl7r8UAKDxi6IKOKt65AXF6fWYco; expires=Sat, 25-Nov-2023 14:23:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+903; expires=Sun, 25-May-2025 14:23:10 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=qgwp7zxk5310&aqid=zMBwZJmbA6aKiM0Poq6p2AU&pbt=bs&adbx=280&adby=807&adbh=36&adbw=720&adbn=slave-1-1&eawp=partner-dp-teaminternet09_3ph&errv=534159633&csala=6%7C0%7C344%7C218%7C336&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LLZtRsH1XXcpP6wk-nSGag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 14:23:10 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=uae_KE8R8R8RHi7tkDm1glMCWGLC3icl0tDA7wlEKkHas2zC6Iy5tjQxYe6exZ_Mah7L-kTSJ3uJAAS-dLI1IgxhfrByHYjRfA7NFhzZEnFTqytHUsbEZA6HvrVuz6Rs2pAOkNtwD7w0oN2eqDauQ0Huu9dvC09PVkwji0Hg-GE; expires=Sat, 25-Nov-2023 14:23:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+326; expires=Sun, 25-May-2025 14:23:10 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=9qxuymabitcm&aqid=zMBwZJmbA6aKiM0Poq6p2AU&pbt=bv&adbx=280&adby=807&adbh=36&adbw=720&adbn=slave-1-1&eawp=partner-dp-teaminternet09_3ph&errv=534159633&csala=6%7C0%7C344%7C218%7C336&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-P0XVICt02a9TAIx9Ik9BXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 14:23:10 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=t_q6BiYYPde0Js6HRxNrOHKq-JH21SVvqrE5DA5oWimFI-Rzv3lZ3Miw9QMAE0NqFJGlw6YxBLf5BeYfmZoXcMhMUEYsAA3HAALrqgMAs2qel7OaeM8BR3jW5TQgzI-pVwY93FfC0vAQamV1pgRmmmwjo82lzpDB0ONO7pezHRQ; expires=Sat, 25-Nov-2023 14:23:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+270; expires=Sun, 25-May-2025 14:23:10 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b7efhx8syx7h&aqid=zMBwZJmbA6aKiM0Poq6p2AU&pbt=bv&adbx=280&adby=169&adbh=594&adbw=720&adbah=56%2C56%2C56%2C56%2C56%2C56%2C56%2C56%2C56%2C56&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=534159633&csala=17%7C0%7C333%7C218%7C336&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-yJhp9C9uGRAs_E4ULPR57Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 14:23:10 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=YQomu33hi6nl9zPoAn_j65vFSyrt3GUIDMQwuW757GbZjgPzltM4b7sR4_pbOa6PQIErdM88eCbCd20wSl0l6Nr-9UQlW3Uv8_LzvVaZRlfiNAUHd76_VEphDV76LAbB1nJFUhnSCBebiylyt4VqUeDhQK1Ee5FTBN7Uv9BYSew; expires=Sat, 25-Nov-2023 14:23:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+456; expires=Sun, 25-May-2025 14:23:10 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.coinfest-team.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             
                                            
                                        
                                            GET /track.php?domain=coinfest-team.asia&caf=1&toggle=answercheck&answer=yes&uid=MTY4NTExMDk4Ni45MjM3OjJhNGY0NDg2MTE1YTZmYWQ4YzU3NTZmYjFlNjg0YWY4ZTNiMDk2MDAwNTA4NTEzODk1YmUwOGYxMzQ4MjY5NTY6NjQ3MGMwY2FlMTgyZA%3D%3D HTTP/1.1 
Host: js.parkingcrew.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.coinfest-team.asia
DNT: 1
Connection: keep-alive
Referer: http://www.coinfest-team.asia/
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             185.53.178.30
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Fri, 26 May 2023 14:23:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip