Report - libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds

Report Overview

Submitted URL
libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds
IP
159.89.23.114
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-18 12:14:55
Access
public
Website Title
libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds
Final URL
libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
14
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
libya.playit.mobi	unknown	2017-06-16	2024-03-21	2024-04-14	13 kB	10 MB	159.89.23.114
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-18	1.3 kB	224 kB	142.250.74.40
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	852 B	12 kB	142.250.74.106
api.playit.mobi	unknown	2017-06-16	2018-12-11	2024-01-07	512 B	104 kB	159.89.23.114
	unknown				1.2 kB	476 B	52.50.5.81
notify.dcbprotect.com	112896	2017-09-27	2018-06-07	2024-04-04	549 B	9.8 kB	34.253.248.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 12:14:31	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:31	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:32	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:32	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:34	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:34	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:37	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-04-18 12:14:37	low	Client IP	142.251.125.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	118 B	2024-04-06	2024-04-21
Pretty URL libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-06 21:50:31 Last Seen2024-04-21 20:16:39 Times Seen4 Hash f41f38a4b0365a8dc19b1900487d3a84 287bb6fc4e913f2c8b547d81eef1613ec9138eb9 91407c70a589693907e424f1df97d06d17cc18126b4b0b97734698b3f18f5df6 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD	206 kB	2024-04-18	2024-04-18
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD IP 142.250.74.40 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:14:58 Last Seen2024-04-18 14:14:59 Times Seen2 Hash f66adbc52b3e70952ca31a754813ad2d abacb0b821fa415e3828bfde989df5c05722c0d5 c7a9893d190368d9111ac453fde94a3cb5f0c094dbeb4fd6f898492c237862b0 Loading...

	ssl.google-analytics.com/ga.js	3.4 kB	2023-04-11	2024-05-01
Pretty URL ssl.google-analytics.com/ga.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-05-01 16:50:10 Times Seen20094 Hash b6f6d7efd99960ab916ee096e061f2e7 e21f1b5b99444ed4e4f62308cf616edd93ee852e bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4 Loading...

	unknown	103 kB	2024-04-18	2024-04-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:14:58 Last Seen2024-04-18 14:14:58 Times Seen1 Hash fbae2334a40e3979ec8cee2eac894b00 e7bef7f1a0a2921baebe1d17934c4592d888c739 2e35b072899c36745c36eb6ca8512c8b5db20ae25212ac5276c1d511f31a3dd4 Loading...

	libya.playit.mobi/sandbox%20eval%20code	148 B	2023-04-11	2024-05-01
Pretty URL libya.playit.mobi/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-05-01 16:50:10 Times Seen20153 Hash 64fe6fe97a487c82c5be70158b71aa87 b93ba17d1796e404b0ca1ef6f262bbbb0c427366 3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2 Loading...

	libya.playit.mobi/static/js/2.21ac2c98.chunk.js	568 kB	2024-04-18	2024-04-21
Pretty URL libya.playit.mobi/static/js/2.21ac2c98.chunk.js IP 159.89.23.114 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 05:32:41 Last Seen2024-04-21 20:16:41 Times Seen12 Hash 574ca3799deca46e6261c78cbaa41db3 bcf8bd5a3241b7ae1e7f96dfe7c308ff0abc905d 8ad732b7986a1fa42fb110b9aa7455bde1ce2889e01256f9f934afb7b6f56d80 Loading...

	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	2.8 kB	2024-04-06	2024-04-18
Pretty URL libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-06 21:50:31 Last Seen2024-04-18 14:14:58 Times Seen3 Hash a46e77ab47b84be57dc57c03837d1741 ee3e42dd4c7c6f3f4aee0296cffe14d5591ee979 a61e9bfcdd61af307d6d45040514d44a17c36f436f50eae143751f738f30543e Loading...

	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	16 kB	2024-04-18	2024-04-18
Pretty URL libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 14:14:58 Last Seen2024-04-18 14:14:58 Times Seen1 Hash 2436f62568a4fbc8bdfeb1f32456d69c 467b48722fcd6681bc7749354334e712332908e4 3155fc8e36d6632b08db3bea81ddf25eee065f173fe0e5e48d8b4030584af2e6 Loading...

	libya.playit.mobi/static/js/main.53f12117.chunk.js	1.7 MB	2024-04-18	2024-04-18
Pretty URL libya.playit.mobi/static/js/main.53f12117.chunk.js IP 159.89.23.114 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:14:58 Last Seen2024-04-18 14:14:59 Times Seen4 Hash 88c63220f7e15a9d204fd29dc7fce183 7a2560e5e4a1bc8571b754c7c09e172a397967e6 515a8409528871f09b9f965f5ba1aa7bd9d3084b395d9ee963e224745aaf5f20 Loading...

HTTP Transactions (38)

	URL	IP	Response	Size
	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	159.89.23.114	200 OK	194 B
URL User Request GET HTTP/1.1 libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN File type HTML document, ASCII text, with CRLF line terminators Size 194 B (194 bytes) Hash a718c83022dda2cc03813d97ea9f3a9a b1e7b25d45f5ea8562a6f7c372491fecec492ad4 e4ef2bd88e50ff8bba2faca31902a8e033531912c11f6ad23dc1fc74a2f38ba8 HTTP Headers GET /signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 301 Moved Permanently Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: text/html Content-Length: 194 Connection: keep-alive Location: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds`

	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	159.89.23.114	200 OK	5.4 kB
URL User Request GET HTTP/1.1 libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN File type HTML document, Unicode text, UTF-8 text, with very long lines (5281) Size 5.4 kB (5443 bytes) Hash 7f17f1480f91c8ad12660b7c16cd1fe1 a117326a7694ed234c2bf3b80015655b2c9b49b1 b6406c5bbf3ed7e021ad59bddfd3d28cb6f8b6e20a8631f9cbbce69222bff541 HTTP Headers `GET /signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: text/html Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"662103be-5dea" Content-Encoding: gzip`

	libya.playit.mobi/static/css/2.85f867a8.chunk.css	159.89.23.114	200 OK	83 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/2.85f867a8.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (61593) Size 83 kB (83411 bytes) Hash 7ac4f4e5e4b9e05d306bac4fb4d9cd6c 21217d2d51060df19257dd6b1a80c769e536383b ba90737f1a02601b5352ece6751621ff9bc31a8e7fa4432c28a208bffe82a2dc HTTP Headers `GET /static/css/2.85f867a8.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: text/css Content-Length: 83411 Last-Modified: Wed, 14 Feb 2024 12:49:11 GMT Connection: keep-alive ETag: "65ccb6c7-145d3" Accept-Ranges: bytes`

	libya.playit.mobi/static/css/main.f567f6a1.chunk.css	159.89.23.114	200 OK	686 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/main.f567f6a1.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (42479) Size 686 kB (685684 bytes) Hash 4fe981ccc5c07080f4cec620477fc447 f2992865d13e851ad7f5f2cb581cc2f95c03ba66 a7be9a71e675c665e1fb2196c6107efa4650f1790bb7108e9b39e20beeb815cd HTTP Headers `GET /static/css/main.f567f6a1.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: text/css Content-Length: 685684 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-a7674" Accept-Ranges: bytes`

	www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD	142.250.74.40	200 OK	74 kB
URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD IP 142.250.74.40:443 ASN #15169 GOOGLE Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT File type JavaScript source, ASCII text, with very long lines (3122) Size 74 kB (74199 bytes) Hash d00b7d601aaa3689daf02aaf0c7ee4c1 bb0eccec21ab8859e6c6e332c79190f173fd4324 5913be90d7a551e5665813e9a5ef0362a06ce465c83173f625e3be8b99952c78 HTTP Headers `GET /gtm.js?id=GTM-PLV6TFD HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 18 Apr 2024 12:14:27 GMT expires: Thu, 18 Apr 2024 12:14:27 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 74199 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	libya.playit.mobi/static/js/2.21ac2c98.chunk.js	159.89.23.114	200 OK	568 kB
URL GET HTTP/1.1 libya.playit.mobi/static/js/2.21ac2c98.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 568 kB (568309 bytes) Hash 574ca3799deca46e6261c78cbaa41db3 bcf8bd5a3241b7ae1e7f96dfe7c308ff0abc905d 8ad732b7986a1fa42fb110b9aa7455bde1ce2889e01256f9f934afb7b6f56d80 HTTP Headers `GET /static/js/2.21ac2c98.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: application/javascript Content-Length: 568309 Last-Modified: Wed, 17 Apr 2024 08:20:20 GMT Connection: keep-alive ETag: "661f8644-8abf5" Accept-Ranges: bytes`

	libya.playit.mobi/static/js/main.53f12117.chunk.js	159.89.23.114	200 OK	1.7 MB
URL GET HTTP/1.1 libya.playit.mobi/static/js/main.53f12117.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 1.7 MB (1699651 bytes) Hash 88c63220f7e15a9d204fd29dc7fce183 7a2560e5e4a1bc8571b754c7c09e172a397967e6 515a8409528871f09b9f965f5ba1aa7bd9d3084b395d9ee963e224745aaf5f20 HTTP Headers `GET /static/js/main.53f12117.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:27 GMT Content-Type: application/javascript Content-Length: 1699651 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-19ef43" Accept-Ranges: bytes`

	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	159.89.23.114	200 OK	5.4 kB
URL User Request GET HTTP/1.1 libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN File type HTML document, Unicode text, UTF-8 text, with very long lines (5281) Size 5.4 kB (5443 bytes) Hash 7f17f1480f91c8ad12660b7c16cd1fe1 a117326a7694ed234c2bf3b80015655b2c9b49b1 b6406c5bbf3ed7e021ad59bddfd3d28cb6f8b6e20a8631f9cbbce69222bff541 HTTP Headers `GET /signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:28 GMT Content-Type: text/html Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"662103be-5dea" Content-Encoding: gzip`

	libya.playit.mobi/static/css/2.85f867a8.chunk.css	159.89.23.114	200 OK	83 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/2.85f867a8.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (61593) Size 83 kB (83411 bytes) Hash 7ac4f4e5e4b9e05d306bac4fb4d9cd6c 21217d2d51060df19257dd6b1a80c769e536383b ba90737f1a02601b5352ece6751621ff9bc31a8e7fa4432c28a208bffe82a2dc HTTP Headers `GET /static/css/2.85f867a8.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:28 GMT Content-Type: text/css Content-Length: 83411 Last-Modified: Wed, 14 Feb 2024 12:49:11 GMT Connection: keep-alive ETag: "65ccb6c7-145d3" Accept-Ranges: bytes`

	www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD	142.250.74.40	200 OK	74 kB
URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD IP 142.250.74.40:443 ASN #15169 GOOGLE Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT File type JavaScript source, ASCII text, with very long lines (3122) Size 74 kB (74199 bytes) Hash d00b7d601aaa3689daf02aaf0c7ee4c1 bb0eccec21ab8859e6c6e332c79190f173fd4324 5913be90d7a551e5665813e9a5ef0362a06ce465c83173f625e3be8b99952c78 HTTP Headers `GET /gtm.js?id=GTM-PLV6TFD HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 18 Apr 2024 12:14:28 GMT expires: Thu, 18 Apr 2024 12:14:28 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 74199 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	libya.playit.mobi/static/css/main.f567f6a1.chunk.css	159.89.23.114	200 OK	686 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/main.f567f6a1.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (42479) Size 686 kB (685684 bytes) Hash 4fe981ccc5c07080f4cec620477fc447 f2992865d13e851ad7f5f2cb581cc2f95c03ba66 a7be9a71e675c665e1fb2196c6107efa4650f1790bb7108e9b39e20beeb815cd HTTP Headers `GET /static/css/main.f567f6a1.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:28 GMT Content-Type: text/css Content-Length: 685684 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-a7674" Accept-Ranges: bytes`

	libya.playit.mobi/static/js/2.21ac2c98.chunk.js	159.89.23.114	200 OK	568 kB
URL GET HTTP/1.1 libya.playit.mobi/static/js/2.21ac2c98.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 568 kB (568309 bytes) Hash 574ca3799deca46e6261c78cbaa41db3 bcf8bd5a3241b7ae1e7f96dfe7c308ff0abc905d 8ad732b7986a1fa42fb110b9aa7455bde1ce2889e01256f9f934afb7b6f56d80 HTTP Headers `GET /static/js/2.21ac2c98.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:28 GMT Content-Type: application/javascript Content-Length: 568309 Last-Modified: Wed, 17 Apr 2024 08:20:20 GMT Connection: keep-alive ETag: "661f8644-8abf5" Accept-Ranges: bytes`

	libya.playit.mobi/static/js/main.53f12117.chunk.js	159.89.23.114	200 OK	1.7 MB
URL GET HTTP/1.1 libya.playit.mobi/static/js/main.53f12117.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 1.7 MB (1699651 bytes) Hash 88c63220f7e15a9d204fd29dc7fce183 7a2560e5e4a1bc8571b754c7c09e172a397967e6 515a8409528871f09b9f965f5ba1aa7bd9d3084b395d9ee963e224745aaf5f20 HTTP Headers `GET /static/js/main.53f12117.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:28 GMT Content-Type: application/javascript Content-Length: 1699651 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-19ef43" Accept-Ranges: bytes`

	fonts.googleapis.com/css?family=Anton	142.250.74.106	200 OK	9.8 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Anton IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT File type gzip compressed data, max compression Size 9.8 kB (9760 bytes) Hash bf20ea5f70b0021ed0c905396a44c7dc e29b71f9b32a72417162296dfaa0461968a5df5b a6f898a4bfaa6bbff6bcae45b16dc80bc9f8158a32dc1d6edd318740cdb4b128 HTTP Headers `GET /css?family=Anton HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 18 Apr 2024 12:14:28 GMT date: Thu, 18 Apr 2024 12:14:28 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	libya.playit.mobi/meta.json?time=1713442469001	159.89.23.114		50 B
URL libya.playit.mobi/meta.json?time=1713442469001 IP 159.89.23.114:0 ASN #14061 DIGITALOCEAN-ASN File type JSON text data Size 50 B (50 bytes) Hash 5470de06bd7f37959b576530e8082e00 04cb840ef62843550f1b02498952820cc26d2293 e962630a7584f25f4e376f5ae03b531cde278c829c306fb126b30ebd5aac103c HTTP Headers `GET /meta.json?time=1713442469001 HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/json Content-Length: 50 Last-Modified: Wed, 14 Jun 2023 11:45:10 GMT Connection: keep-alive ETag: "6489a846-32" Accept-Ranges: bytes`

	libya.playit.mobi/static/media/SourceSansPro-Regular.893d032b.otf	159.89.23.114	200 OK	102 kB
URL GET HTTP/1.1 libya.playit.mobi/static/media/SourceSansPro-Regular.893d032b.otf IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type OpenType font data Size 102 kB (102376 bytes) Hash 893d032b2fb55fa09b975b1210faec16 1334975c50c8a9ca9f339b692b2ca5335a9f4682 0f2e883207335eb98298d4e5669b76300424f836d9787c9f2a4ff7eeb9ebca44 HTTP Headers `GET /static/media/SourceSansPro-Regular.893d032b.otf HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/static/css/main.f567f6a1.chunk.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/octet-stream Content-Length: 102376 Last-Modified: Sun, 05 Nov 2023 12:32:46 GMT Connection: keep-alive ETag: "65478b6e-18fe8" Accept-Ranges: bytes`

	libya.playit.mobi/locales/en/translation.json	159.89.23.114	200 OK	32 kB
URL GET HTTP/1.1 libya.playit.mobi/locales/en/translation.json IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JSON text data Size 32 kB (32266 bytes) Hash cc1e7de048c5b1ee3ae6a19ea49d95eb d8c349110c05faa056b26eed51c51ed86ae443e3 082ac3dc8bbb52f0ac12ea423cbabdd48069235c8668f389c8b3e5568f15b945 HTTP Headers `GET /locales/en/translation.json HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds X-Requested-With: XMLHttpRequest DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/json Content-Length: 32266 Last-Modified: Wed, 17 Apr 2024 08:20:20 GMT Connection: keep-alive ETag: "661f8644-7e0a" Accept-Ranges: bytes`

	libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds	159.89.23.114	200 OK	5.4 kB
URL User Request GET HTTP/1.1 libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN File type HTML document, Unicode text, UTF-8 text, with very long lines (5281) Size 5.4 kB (5443 bytes) Hash 7f17f1480f91c8ad12660b7c16cd1fe1 a117326a7694ed234c2bf3b80015655b2c9b49b1 b6406c5bbf3ed7e021ad59bddfd3d28cb6f8b6e20a8631f9cbbce69222bff541 HTTP Headers `GET /signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: text/html Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"662103be-5dea" Content-Encoding: gzip`

	libya.playit.mobi/static/css/2.85f867a8.chunk.css	159.89.23.114	200 OK	83 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/2.85f867a8.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (61593) Size 83 kB (83411 bytes) Hash 7ac4f4e5e4b9e05d306bac4fb4d9cd6c 21217d2d51060df19257dd6b1a80c769e536383b ba90737f1a02601b5352ece6751621ff9bc31a8e7fa4432c28a208bffe82a2dc HTTP Headers `GET /static/css/2.85f867a8.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: text/css Content-Length: 83411 Last-Modified: Wed, 14 Feb 2024 12:49:11 GMT Connection: keep-alive ETag: "65ccb6c7-145d3" Accept-Ranges: bytes`

	www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD	142.250.74.40	200 OK	74 kB
URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PLV6TFD IP 142.250.74.40:443 ASN #15169 GOOGLE Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerGoogle Trust Services LLC Subject.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT File type JavaScript source, ASCII text, with very long lines (3122) Size 74 kB (74199 bytes) Hash f66adbc52b3e70952ca31a754813ad2d abacb0b821fa415e3828bfde989df5c05722c0d5 c7a9893d190368d9111ac453fde94a3cb5f0c094dbeb4fd6f898492c237862b0 HTTP Headers `GET /gtm.js?id=GTM-PLV6TFD HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 18 Apr 2024 12:14:29 GMT expires: Thu, 18 Apr 2024 12:14:29 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 74199 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	libya.playit.mobi/static/js/2.21ac2c98.chunk.js	159.89.23.114	200 OK	568 kB
URL GET HTTP/1.1 libya.playit.mobi/static/js/2.21ac2c98.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 568 kB (568309 bytes) Hash 574ca3799deca46e6261c78cbaa41db3 bcf8bd5a3241b7ae1e7f96dfe7c308ff0abc905d 8ad732b7986a1fa42fb110b9aa7455bde1ce2889e01256f9f934afb7b6f56d80 HTTP Headers `GET /static/js/2.21ac2c98.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/javascript Content-Length: 568309 Last-Modified: Wed, 17 Apr 2024 08:20:20 GMT Connection: keep-alive ETag: "661f8644-8abf5" Accept-Ranges: bytes`

	libya.playit.mobi/static/css/main.f567f6a1.chunk.css	159.89.23.114	200 OK	686 kB
URL GET HTTP/1.1 libya.playit.mobi/static/css/main.f567f6a1.chunk.css IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type ASCII text, with very long lines (42479) Size 686 kB (685684 bytes) Hash 4fe981ccc5c07080f4cec620477fc447 f2992865d13e851ad7f5f2cb581cc2f95c03ba66 a7be9a71e675c665e1fb2196c6107efa4650f1790bb7108e9b39e20beeb815cd HTTP Headers `GET /static/css/main.f567f6a1.chunk.css HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: text/css Content-Length: 685684 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-a7674" Accept-Ranges: bytes`

	libya.playit.mobi/static/js/main.53f12117.chunk.js	159.89.23.114	200 OK	1.7 MB
URL GET HTTP/1.1 libya.playit.mobi/static/js/main.53f12117.chunk.js IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 1.7 MB (1699651 bytes) Hash 88c63220f7e15a9d204fd29dc7fce183 7a2560e5e4a1bc8571b754c7c09e172a397967e6 515a8409528871f09b9f965f5ba1aa7bd9d3084b395d9ee963e224745aaf5f20 HTTP Headers `GET /static/js/main.53f12117.chunk.js HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/javascript Content-Length: 1699651 Last-Modified: Thu, 18 Apr 2024 11:27:58 GMT Connection: keep-alive ETag: "662103be-19ef43" Accept-Ranges: bytes`

	libya.playit.mobi/meta.json?time=1713442469865	159.89.23.114	200 OK	50 B
URL GET HTTP/1.1 libya.playit.mobi/meta.json?time=1713442469865 IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JSON text data Size 50 B (50 bytes) Hash 5470de06bd7f37959b576530e8082e00 04cb840ef62843550f1b02498952820cc26d2293 e962630a7584f25f4e376f5ae03b531cde278c829c306fb126b30ebd5aac103c HTTP Headers `GET /meta.json?time=1713442469865 HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/json Content-Length: 50 Last-Modified: Wed, 14 Jun 2023 11:45:10 GMT Connection: keep-alive ETag: "6489a846-32" Accept-Ranges: bytes`

	libya.playit.mobi/static/media/SourceSansPro-Regular.893d032b.otf	159.89.23.114	200 OK	102 kB
URL GET HTTP/1.1 libya.playit.mobi/static/media/SourceSansPro-Regular.893d032b.otf IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type OpenType font data Size 102 kB (102376 bytes) Hash 893d032b2fb55fa09b975b1210faec16 1334975c50c8a9ca9f339b692b2ca5335a9f4682 0f2e883207335eb98298d4e5669b76300424f836d9787c9f2a4ff7eeb9ebca44 HTTP Headers `GET /static/media/SourceSansPro-Regular.893d032b.otf HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/static/css/main.f567f6a1.chunk.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/octet-stream Content-Length: 102376 Last-Modified: Sun, 05 Nov 2023 12:32:46 GMT Connection: keep-alive ETag: "65478b6e-18fe8" Accept-Ranges: bytes`

	libya.playit.mobi/locales/en/translation.json	159.89.23.114	200 OK	32 kB
URL GET HTTP/1.1 libya.playit.mobi/locales/en/translation.json IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JSON text data Size 32 kB (32266 bytes) Hash cc1e7de048c5b1ee3ae6a19ea49d95eb d8c349110c05faa056b26eed51c51ed86ae443e3 082ac3dc8bbb52f0ac12ea423cbabdd48069235c8668f389c8b3e5568f15b945 HTTP Headers `GET /locales/en/translation.json HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds X-Requested-With: XMLHttpRequest DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/json Content-Length: 32266 Last-Modified: Wed, 17 Apr 2024 08:20:20 GMT Connection: keep-alive ETag: "661f8644-7e0a" Accept-Ranges: bytes`

	libya.playit.mobi/favicon.ico	159.89.23.114	200 OK	3.9 kB
URL GET HTTP/1.1 libya.playit.mobi/favicon.ico IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with - PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel Size 3.9 kB (3870 bytes) Hash c92b85a5b907c70211f4ec25e29a8c4a 1120538c77ad1f28a89243b4b53fe2ac16cc3bc6 3d10f7da6c603178340081668c4ac5b3ae9743ca9a262ab0fcd312fbb9f48bdd HTTP Headers `GET /favicon.ico HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/x-icon Content-Length: 3870 Last-Modified: Tue, 07 Apr 2020 14:45:44 GMT Connection: keep-alive ETag: "5e8c9218-f1e" Accept-Ranges: bytes`

	fonts.googleapis.com/css?family=Anton	142.250.74.106	200 OK	803 B
URL GET HTTP/2 fonts.googleapis.com/css?family=Anton IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT File type gzip compressed data, max compression Size 803 B (803 bytes) Hash c089735cfc9bf79e57701eca16c778d7 b2d82d5efa762ff7e5a39faee901e88b20254fe9 b54cdc0694844993e8f1f7991a41960b3ec9bac283929887d5fb51ab978a12cf HTTP Headers `GET /css?family=Anton HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 18 Apr 2024 12:14:29 GMT date: Thu, 18 Apr 2024 12:14:29 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	libya.playit.mobi/assets/images/subscribegamezriod/Repeat.png	159.89.23.114	200 OK	525 B
URL GET HTTP/1.1 libya.playit.mobi/assets/images/subscribegamezriod/Repeat.png IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type PNG image data, 33 x 17, 8-bit/color RGBA, non-interlaced Size 525 B (525 bytes) Hash cc1d8f9b65159e1dbe8b9d4c9cf9833b e00a059236506459a2124160dc3ae8de20ae34dd 75146d51ec9b97fd76a74a37655b444d6b15bc6062ff2f86a47b39440a4e4c48 HTTP Headers `GET /assets/images/subscribegamezriod/Repeat.png HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/png Content-Length: 525 Last-Modified: Sun, 06 Sep 2020 12:51:42 GMT Connection: keep-alive ETag: "5f54db5e-20d" Accept-Ranges: bytes`

	libya.playit.mobi/assets/images/subscribegamezriod/group.png	159.89.23.114	200 OK	499 B
URL GET HTTP/1.1 libya.playit.mobi/assets/images/subscribegamezriod/group.png IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type PNG image data, 32 x 20, 8-bit/color RGBA, non-interlaced Size 499 B (499 bytes) Hash ad3af98634f7404b6d57031049704b20 a06dec26cfe38ffe0ebc1966908a89bebd7ab9e6 e9f48ac14548877e6837341743f20e94b618e4b86008937d7fd031794020c461 HTTP Headers `GET /assets/images/subscribegamezriod/group.png HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/png Content-Length: 499 Last-Modified: Sun, 06 Sep 2020 12:51:42 GMT Connection: keep-alive ETag: "5f54db5e-1f3" Accept-Ranges: bytes`

	libya.playit.mobi/static/media/playit.7ed82872.svg	159.89.23.114	200 OK	2.9 kB
URL GET HTTP/1.1 libya.playit.mobi/static/media/playit.7ed82872.svg IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type SVG Scalable Vector Graphics image Size 2.9 kB (2862 bytes) Hash 7ed8287287e0de1e928cdbd471906742 bfba48d7b9967b715e9514921be7dbbcc5603da7 ec4149aa2dea2a8efe26fba1cb2fdb936a005777dde71ce251a638a5b412084d HTTP Headers `GET /static/media/playit.7ed82872.svg HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/svg+xml Content-Length: 2862 Last-Modified: Sun, 05 Nov 2023 12:32:46 GMT Connection: keep-alive ETag: "65478b6e-b2e" Accept-Ranges: bytes`

	libya.playit.mobi/static/media/SourceSansPro-Bold.2efb5369.otf	159.89.23.114	200 OK	105 kB
URL GET HTTP/1.1 libya.playit.mobi/static/media/SourceSansPro-Bold.2efb5369.otf IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type OpenType font data Size 105 kB (104684 bytes) Hash 2efb53694593f2f5bc69afb3eab8ddc7 30422178336d4907015750c118891a1828591bc1 4511e0cc630e7ec5a186f938e63a9c6a836488ca259273a96cbcaed4388b0d99 HTTP Headers `GET /static/media/SourceSansPro-Bold.2efb5369.otf HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/static/css/main.f567f6a1.chunk.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: application/octet-stream Content-Length: 104684 Last-Modified: Sun, 05 Nov 2023 12:32:46 GMT Connection: keep-alive ETag: "65478b6e-198ec" Accept-Ranges: bytes`

	libya.playit.mobi/static/media/games.c54ce936.png	159.89.23.114	200 OK	735 kB
URL GET HTTP/1.1 libya.playit.mobi/static/media/games.c54ce936.png IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced Size 735 kB (734733 bytes) Hash c54ce936ab9d1a86d9cb5c38527a5929 fcbfb660d3288ccc2083cfb6554d8efcbc1015ce fd901831b0418b691bc46b30f93491d93094b824930c392546f0e53da9ea6f63 HTTP Headers `GET /static/media/games.c54ce936.png HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/png Content-Length: 734733 Last-Modified: Wed, 03 Jan 2024 12:15:00 GMT Connection: keep-alive ETag: "65954fc4-b360d" Accept-Ranges: bytes`

	api.playit.mobi/api/v2/connex-libya/get-protected-script?targeted_element=%23signupbut	159.89.23.114	200 OK	104 kB
URL GET HTTP/1.1 api.playit.mobi/api/v2/connex-libya/get-protected-script?targeted_element=%23signupbut IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type JSON text data Size 104 kB (103474 bytes) Hash a57aa708cd659ad82d2cbd3a3062a747 1308c237b27cbbfe9e4665d0b59bbffe0e5c9c80 34c94f1e282c58a22b2f23ed0d303129695d9f1398a692373a3ab5b5ddbea2b9 HTTP Headers `GET /api/v2/connex-libya/get-protected-script?targeted_element=%23signupbut HTTP/1.1 Host: api.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Origin: http://libya.playit.mobi DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:30 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: PHPSESSID=8cf34uikfi0upcieaj7scvqbl5; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: http://libya.playit.mobi Access-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Origin, Authorization ,ethauthorization,bhmsisdn,batelcomsisdn,HTTP_Msisdn,egauthorization Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Credentials: true

	ws.dcbprotect.com:8080/	52.50.5.81		0 B
URL ws.dcbprotect.com:8080/ IP 52.50.5.81:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ws.dcbprotect.com:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: http://libya.playit.mobi Sec-WebSocket-Protocol: echo-protocol Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: pw+mM/5owp1cuYP4j1FqSg== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols upgrade: websocket connection: Upgrade sec-websocket-accept: HcKbnz7jkygRYam1abeIoZP+nAo= sec-websocket-protocol: echo-protocol origin: http://libya.playit.mobi date: Thu, 18 Apr 2024 12:14:30 GMT`

	notify.dcbprotect.com/A851009435430761600484822248646408020280848248068	34.253.248.174	200 OK	9.5 kB
URL POST HTTP/2 notify.dcbprotect.com/A851009435430761600484822248646408020280848248068 IP 34.253.248.174:443 ASN #16509 AMAZON-02 Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerAmazon Subject.eu-west-1.prd.dcbprotect.com FingerprintB8:8F:C4:23:5B:B1:93:38:86:4C:70:7D:65:17:7F:88:D3:52:99:71 ValidityTue, 02 Apr 2024 00:00:00 GMT - Thu, 01 May 2025 23:59:59 GMT File type gzip compressed data, max speed, from Unix Size 9.5 kB (9535 bytes) Hash 75edd4cc5f5d9cb7147b664c48fa3354 1311e0830c2046d2fb91361c42d4dd3a59035c49 5e5267b97ca227fb468171aec8c320e78ea5fa1902f0490548bd9e2ea64a71a3 HTTP Headers POST /A851009435430761600484822248646408020280848248068 HTTP/1.1 Host: notify.dcbprotect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: application/x-www-form-urlencoded Content-Length: 10048 Origin: http://libya.playit.mobi DNT: 1 Connection: keep-alive Referer: http://libya.playit.mobi/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Thu, 18 Apr 2024 12:14:31 GMT content-type: text/html; charset=UTF-8 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-encoding: gzip X-Firefox-Spdy: h2`

	ws.dcbprotect.com:8080/	52.50.5.81	101 Switching Protocols	0 B
URL GET HTTP/1.1 ws.dcbprotect.com:8080/ IP 52.50.5.81:8080 ASN #16509 AMAZON-02 Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds Certificate IssuerAmazon Subject.eu-west-1.prd.dcbprotect.com FingerprintB8:8F:C4:23:5B:B1:93:38:86:4C:70:7D:65:17:7F:88:D3:52:99:71 ValidityTue, 02 Apr 2024 00:00:00 GMT - Thu, 01 May 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ws.dcbprotect.com:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: http://libya.playit.mobi Sec-WebSocket-Protocol: echo-protocol Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: pw+mM/5owp1cuYP4j1FqSg== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols upgrade: websocket connection: Upgrade sec-websocket-accept: HcKbnz7jkygRYam1abeIoZP+nAo= sec-websocket-protocol: echo-protocol origin: http://libya.playit.mobi date: Thu, 18 Apr 2024 12:14:30 GMT`

	libya.playit.mobi/assets/images/subscribegamezriod/like.png	159.89.23.114	200 OK	392 B
URL GET HTTP/1.1 libya.playit.mobi/assets/images/subscribegamezriod/like.png IP 159.89.23.114:80 ASN #14061 DIGITALOCEAN-ASN Requested by http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds File type PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced Size 392 B (392 bytes) Hash 79c18f87f4c6107f39d4efa39022f701 534f2dfc7a429a6230c1cd1a00572d81f2b2bcfb b25399d1fd2c13044fed9758b0c763e80ba1538f5d0692ee954c6ffd4e52ba10 HTTP Headers `GET /assets/images/subscribegamezriod/like.png HTTP/1.1 Host: libya.playit.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://libya.playit.mobi/signup?parameter=wpkutqelln7ui4m035iibme4&trafficsource=PropellerAds DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 12:14:29 GMT Content-Type: image/png Content-Length: 392 Last-Modified: Sun, 06 Sep 2020 12:51:42 GMT Connection: keep-alive ETag: "5f54db5e-188" Accept-Ranges: bytes`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL