d84ae6a1fe42df7886cbaec78b8433ab93a2ff54b0290754eb7b5315734904bb

Resubmissions

11/10/2023, 00:51 UTC

231011-a7gevsbe37 10

11/10/2023, 00:50 UTC

231011-a652tshd41 10

31/01/2023, 09:06 UTC

230131-k21xeshe3z 7

Analysis

max time kernel
149s
max time network
155s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
31/01/2023, 09:06 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

RDR2CHEAT/PrimeXLauncher.exe
Size

159KB
MD5

0c2de2a3c96398428b0ce53ee8be212f
SHA1

348a9089ecdc242b2d729f642a70794d74c9a06b
SHA256

1331d10811b5b02f55f7a6fa0e957543c2c2ea5c9817518f97905b6038dfed93
SHA512

b767bb3487ddca3bfd8d998b675d149f06473190755d8b0402469ddfebfc4121384bd65107850036b67f72429bd8fca399b9b3ec54f088a49935f20ca5d3f0a3
SSDEEP

3072:OaAzRVKaMvVMLGXVJYkwOQKlTXSRBI1IVZQLv0e0Ut:OaAzRV9MMIF1IVZQLv

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
spyware

Data from Local System
T1005

Credentials in Files
T1081
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3844063266-715245855-4050956231-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2708	PrimeXLauncher.exe
2708	PrimeXLauncher.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	2708	PrimeXLauncher.exe
Token: SeDebugPrivilege	4400	firefox.exe
Token: SeDebugPrivilege	4400	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe
4400	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 3484 wrote to memory of 4400	3484	firefox.exe	71
PID 4400 wrote to memory of 4812	4400	firefox.exe	72
PID 4400 wrote to memory of 4812	4400	firefox.exe	72
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 5024	4400	firefox.exe	74
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75
PID 4400 wrote to memory of 4520	4400	firefox.exe	75

C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2708

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4312

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3484
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4400.0.945536853\974990206" -parentBuildID 20200403170909 -prefsHandle 1536 -prefMapHandle 1528 -prefsLen 1 -prefMapSize 220115 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4400 "\\.\pipe\gecko-crash-server-pipe.4400" 1628 gpu
    3⤵
    PID:4812
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4400.3.999519027\1662905133" -childID 1 -isForBrowser -prefsHandle 2340 -prefMapHandle 2332 -prefsLen 156 -prefMapSize 220115 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4400 "\\.\pipe\gecko-crash-server-pipe.4400" 2208 tab
    3⤵
    PID:5024
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4400.13.1260672105\1442429108" -childID 2 -isForBrowser -prefsHandle 3432 -prefMapHandle 3428 -prefsLen 6938 -prefMapSize 220115 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 4400 "\\.\pipe\gecko-crash-server-pipe.4400" 3444 tab
    3⤵
    PID:4520

Network

DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN A

35.241.9.150
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists

firefox.exe

Remote address:

35.241.9.150:443

Request

GET /v1/buckets/main/collections/hijack-blocklists HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/records?collection=cfr-fxa&bucket=main

firefox.exe

Remote address:

35.241.9.150:443

Request

GET /v1/buckets/monitor/collections/changes/records?collection=cfr-fxa&bucket=main HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
if-modified-since: Fri, 12 Aug 2022 12:57:11 GMT
if-none-match: "1660309031547"
te: trailers
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN A

35.241.9.150
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN AAAA

Response
DNS

search.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

search.services.mozilla.com

IN A

Response

search.services.mozilla.com

IN CNAME

search.r53-2.services.mozilla.com

search.r53-2.services.mozilla.com

IN A

34.160.46.54
DNS

a1887.dscq.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1887.dscq.akamai.net

IN A

Response

a1887.dscq.akamai.net

IN A

88.221.25.176

a1887.dscq.akamai.net

IN A

88.221.25.162
GET

https://search.services.mozilla.com/1/firefox/75.0/release/en-US/IE/default/default/nov17-1

firefox.exe

Remote address:

34.160.46.54:443

Request

GET /1/firefox/75.0/release/en-US/IE/default/default/nov17-1 HTTP/2.0
host: search.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
te: trailers
DNS

search.r53-2.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

search.r53-2.services.mozilla.com

IN A

Response

search.r53-2.services.mozilla.com

IN A

34.160.46.54
DNS

search.r53-2.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

search.r53-2.services.mozilla.com

IN AAAA

Response
DNS

a1887.dscq.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1887.dscq.akamai.net

IN AAAA

Response

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:b200::1748:fc9b

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:b200::1748:fc93
DNS

push.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

push.services.mozilla.com

IN A

Response

push.services.mozilla.com

IN CNAME

autopush.prod.mozaws.net

autopush.prod.mozaws.net

IN A

35.82.231.103

autopush.prod.mozaws.net

IN A

34.213.61.61

autopush.prod.mozaws.net

IN A

52.39.218.209

autopush.prod.mozaws.net

IN A

52.10.184.136

autopush.prod.mozaws.net

IN A

54.148.75.183

autopush.prod.mozaws.net

IN A

34.209.122.114

autopush.prod.mozaws.net

IN A

54.187.189.114

autopush.prod.mozaws.net

IN A

35.160.240.54
DNS

shavar.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.services.mozilla.com

IN A

Response

shavar.services.mozilla.com

IN CNAME

shavar.prod.mozaws.net

shavar.prod.mozaws.net

IN A

34.217.182.232

shavar.prod.mozaws.net

IN A

52.35.56.228

shavar.prod.mozaws.net

IN A

34.218.12.40

shavar.prod.mozaws.net

IN A

44.236.61.188

shavar.prod.mozaws.net

IN A

35.82.174.126

shavar.prod.mozaws.net

IN A

44.234.248.225
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN A

Response

shavar.prod.mozaws.net

IN A

44.234.248.225

shavar.prod.mozaws.net

IN A

34.217.182.232

shavar.prod.mozaws.net

IN A

35.82.174.126

shavar.prod.mozaws.net

IN A

52.35.56.228

shavar.prod.mozaws.net

IN A

34.218.12.40

shavar.prod.mozaws.net

IN A

44.236.61.188
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN A

Response

autopush.prod.mozaws.net

IN A

52.10.3.114

autopush.prod.mozaws.net

IN A

35.83.200.106

autopush.prod.mozaws.net

IN A

44.227.59.33

autopush.prod.mozaws.net

IN A

34.216.206.159

autopush.prod.mozaws.net

IN A

54.214.111.16

autopush.prod.mozaws.net

IN A

34.210.191.84

autopush.prod.mozaws.net

IN A

52.41.156.90

autopush.prod.mozaws.net

IN A

54.149.93.186
DNS

content-signature-2.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

content-signature-2.cdn.mozilla.net

IN A

Response

content-signature-2.cdn.mozilla.net

IN CNAME

content-signature-chains.prod.autograph.services.mozaws.net

content-signature-chains.prod.autograph.services.mozaws.net

IN CNAME

prod.content-signature-chains.prod.webservices.mozgcp.net

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN AAAA

Response
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
GET

https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

firefox.exe

Remote address:

34.160.144.191:443

Request

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/2.0
host: content-signature-2.cdn.mozilla.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
te: trailers
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

snippets.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

snippets.cdn.mozilla.net

IN A

Response

snippets.cdn.mozilla.net

IN CNAME

d228z91au11ukj.cloudfront.net

d228z91au11ukj.cloudfront.net

IN A

65.9.86.119

d228z91au11ukj.cloudfront.net

IN A

65.9.86.24

d228z91au11ukj.cloudfront.net

IN A

65.9.86.52

d228z91au11ukj.cloudfront.net

IN A

65.9.86.64
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
GET

https://snippets.cdn.mozilla.net/6/Firefox/75.0/20200403170909/WINNT_x86_64-msvc/en-US/release/Windows_NT%2010.0/default/default/

firefox.exe

Remote address:

65.9.86.119:443

Request

GET /6/Firefox/75.0/20200403170909/WINNT_x86_64-msvc/en-US/release/Windows_NT%2010.0/default/default/ HTTP/1.1
Host: snippets.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

Response

HTTP/1.1 303 See Other

Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: public, max-age=86400
Date: Tue, 31 Jan 2023 01:18:23 GMT
Location: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json
Server: meinheld/1.0.2
X-Backend-Server: frankfurt/snippets-prod/snippets-prod-5574c9cf88-h27cl
X-Cache: Hit from cloudfront
Via: 1.1 084f866feba2345e668d9a32662696ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: eNCeLd86E2TeIxDEgzaczV8M0rI0XraPX-arNNXrUoehjxrMNM5xGA==
Age: 28212
GET

https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json

firefox.exe

Remote address:

65.9.86.119:443

Request

GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1
Host: snippets.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
If-Modified-Since: Mon, 25 Jul 2022 18:00:54 GMT
If-None-Match: "13ade98d743e520d0e58f3b5fdc88d34"

Response

HTTP/1.1 200 OK

Content-Type: application/json
Content-Length: 6888
Connection: keep-alive
Last-Modified: Fri, 06 Jan 2023 15:37:39 GMT
x-amz-expiration: expiry-date="Wed, 08 Mar 2023 00:00:00 GMT", rule-id="bundles"
Content-Encoding: br
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 31 Jan 2023 09:03:00 GMT
Cache-Control: max-age=600
ETag: "34de4450eea7c85e9fae4491442325dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 084f866feba2345e668d9a32662696ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: MNxN60rEHDd7Asj22vYgkoJj8TxiI9oE0cgtlQgxQZsKU7apEUov1g==
Age: 336
DNS

d228z91au11ukj.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d228z91au11ukj.cloudfront.net

IN A

Response

d228z91au11ukj.cloudfront.net

IN A

65.9.86.24

d228z91au11ukj.cloudfront.net

IN A

65.9.86.119

d228z91au11ukj.cloudfront.net

IN A

65.9.86.52

d228z91au11ukj.cloudfront.net

IN A

65.9.86.64
DNS

d228z91au11ukj.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

d228z91au11ukj.cloudfront.net

IN AAAA

Response
DNS

cs9.wac.phicdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cs9.wac.phicdn.net

IN A

Response

cs9.wac.phicdn.net

IN A

117.18.237.29
DNS

cs9.wac.phicdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cs9.wac.phicdn.net

IN AAAA

Response
DNS

www.facebook.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.facebook.com

IN A

Response

www.facebook.com

IN CNAME

star-mini.c10r.facebook.com

star-mini.c10r.facebook.com

IN A

157.240.247.35
DNS

www.wikipedia.org

firefox.exe

Remote address:

8.8.8.8:53

Request

www.wikipedia.org

IN A

Response

www.wikipedia.org

IN CNAME

dyna.wikimedia.org

dyna.wikimedia.org

IN A

103.102.166.224
DNS

dyna.wikimedia.org

firefox.exe

Remote address:

8.8.8.8:53

Request

dyna.wikimedia.org

IN A

Response

dyna.wikimedia.org

IN A

103.102.166.224
DNS

star-mini.c10r.facebook.com

firefox.exe

Remote address:

8.8.8.8:53

Request

star-mini.c10r.facebook.com

IN A

Response

star-mini.c10r.facebook.com

IN A

157.240.196.35
DNS

youtube-ui.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

youtube-ui.l.google.com

IN A

Response

youtube-ui.l.google.com

IN A

216.58.214.14

youtube-ui.l.google.com

IN A

142.250.179.142

youtube-ui.l.google.com

IN A

142.251.36.46

youtube-ui.l.google.com

IN A

172.217.168.238

youtube-ui.l.google.com

IN A

142.250.179.174

youtube-ui.l.google.com

IN A

142.250.179.206

youtube-ui.l.google.com

IN A

142.251.36.14

youtube-ui.l.google.com

IN A

142.251.39.110

youtube-ui.l.google.com

IN A

172.217.168.206
DNS

youtube-ui.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

youtube-ui.l.google.com

IN AAAA

Response

youtube-ui.l.google.com

IN AAAA

2a00:1450:400e:800::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:400e:801::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:400e:810::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:400e:80d::200e
DNS

star-mini.c10r.facebook.com

firefox.exe

Remote address:

8.8.8.8:53

Request

star-mini.c10r.facebook.com

IN AAAA

Response

star-mini.c10r.facebook.com

IN AAAA

2a03:2880:f142:182:face:b00c:0:25de
DNS

www.reddit.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.reddit.com

IN A

Response

www.reddit.com

IN CNAME

reddit.map.fastly.net

reddit.map.fastly.net

IN A

151.101.1.140

reddit.map.fastly.net

IN A

151.101.65.140

reddit.map.fastly.net

IN A

151.101.129.140

reddit.map.fastly.net

IN A

151.101.193.140
DNS

dyna.wikimedia.org

firefox.exe

Remote address:

8.8.8.8:53

Request

dyna.wikimedia.org

IN AAAA

Response

dyna.wikimedia.org

IN AAAA

2001:df2:e500:ed1a::1
DNS

twitter.com

firefox.exe

Remote address:

8.8.8.8:53

Request

twitter.com

IN A

Response

twitter.com

IN A

104.244.42.65

twitter.com

IN A

104.244.42.129
DNS

reddit.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

reddit.map.fastly.net

IN A

Response

reddit.map.fastly.net

IN A

151.101.1.140

reddit.map.fastly.net

IN A

151.101.65.140

reddit.map.fastly.net

IN A

151.101.129.140

reddit.map.fastly.net

IN A

151.101.193.140
DNS

twitter.com

firefox.exe

Remote address:

8.8.8.8:53

Request

twitter.com

IN A

Response

twitter.com

IN A

104.244.42.193

twitter.com

IN A

104.244.42.1
DNS

twitter.com

firefox.exe

Remote address:

8.8.8.8:53

Request

twitter.com

IN AAAA

Response
DNS

reddit.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

reddit.map.fastly.net

IN AAAA

Response
DNS

pki-goog.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pki-goog.l.google.com

IN A

Response

pki-goog.l.google.com

IN A

142.251.36.35
DNS

pki-goog.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

pki-goog.l.google.com

IN AAAA

Response

pki-goog.l.google.com

IN AAAA

2a00:1450:400e:810::2003
DNS

apis.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

apis.google.com

IN A

Response

apis.google.com

IN CNAME

plus.l.google.com

plus.l.google.com

IN A

216.58.208.110
GET

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.3R2S2iMRC9o.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8-ukmJKpOYaCGRb909wNTowBRXFA/cb=gapi.loaded_0

firefox.exe

Remote address:

216.58.208.110:443

Request

GET /_/scs/abc-static/_/js/k=gapi.gapi.en.3R2S2iMRC9o.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8-ukmJKpOYaCGRb909wNTowBRXFA/cb=gapi.loaded_0 HTTP/2.0
host: apis.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/
cookie: 1P_JAR=2023-01-31-09
cookie: AEC=ARSKqsLk4ANniqllbXYvo1CPZsMEAYJT7W8gs3A5IMA4UaBc4tdyHj_HQmM
cookie: NID=511=TVQGLnsZEsTa1NSNMauur2feIjxx29LVr2w1K6LqfuCaPdnzZOPtfxTRApAnv_dVFhFBNKPe3cvV9wgOqEznZYhg5U74nFo_GKh52hvMY2eYpQmaA7xI2d63H9bk_2QcZKPlsfa4FDaMXPbyF3D8FGtBtJQP9ikcjiDOTyytjEQ
te: trailers
DNS

plus.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

plus.l.google.com

IN A

Response

plus.l.google.com

IN A

216.58.208.110
DNS

plus.l.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

plus.l.google.com

IN AAAA

Response

plus.l.google.com

IN AAAA

2a00:1450:400e:80e::200e
DNS

play.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

play.google.com

IN A

Response

play.google.com

IN A

142.251.36.14
DNS

googleads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

172.217.168.226
POST

https://play.google.com/log?format=json&hasfast=true&authuser=0

firefox.exe

Remote address:

142.251.36.14:443

Request

POST /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/
x-goog-authuser: 0
content-type: application/x-www-form-urlencoded;charset=utf-8
content-length: 395
origin: https://www.google.com
cookie: 1P_JAR=2023-01-31-09
cookie: AEC=ARSKqsLk4ANniqllbXYvo1CPZsMEAYJT7W8gs3A5IMA4UaBc4tdyHj_HQmM
cookie: NID=511=TVQGLnsZEsTa1NSNMauur2feIjxx29LVr2w1K6LqfuCaPdnzZOPtfxTRApAnv_dVFhFBNKPe3cvV9wgOqEznZYhg5U74nFo_GKh52hvMY2eYpQmaA7xI2d63H9bk_2QcZKPlsfa4FDaMXPbyF3D8FGtBtJQP9ikcjiDOTyytjEQ
te: trailers
DNS

play.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

play.google.com

IN A

Response

play.google.com

IN A

142.251.36.14
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

firefox.exe

Remote address:

142.251.36.14:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
referer: https://www.google.com/
origin: https://www.google.com
te: trailers
GET

https://googleads.g.doubleclick.net/adsid/google/ui?gadsid=AORoGNQXDHf0NXdM5gzdkISXc6T2txvIMeu0y7xqqykwW0zy0qx4KeT0QA

firefox.exe

Remote address:

172.217.168.226:443

Request

GET /adsid/google/ui?gadsid=AORoGNQXDHf0NXdM5gzdkISXc6T2txvIMeu0y7xqqykwW0zy0qx4KeT0QA HTTP/2.0
host: googleads.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/
te: trailers
GET

https://googleads.g.doubleclick.net/adsid/google/si?gadsid=AORoGNTfcFc_IhlSrInQIGRovk6qMwBJEgAniy1Cf2yQ-ATLXA3EMnV-9w

firefox.exe

Remote address:

172.217.168.226:443

Request

GET /adsid/google/si?gadsid=AORoGNTfcFc_IhlSrInQIGRovk6qMwBJEgAniy1Cf2yQ-ATLXA3EMnV-9w HTTP/2.0
host: googleads.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/
te: trailers
DNS

googleads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

172.217.168.226
DNS

play.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

play.google.com

IN AAAA

Response

play.google.com

IN AAAA

2a00:1450:400e:80f::200e
DNS

googleads.g.doubleclick.net

firefox.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN AAAA

Response

googleads.g.doubleclick.net

IN AAAA

2a00:1450:400e:802::2002
DNS

github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

20.207.73.82
GET

https://github.com/remax3r

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:08:57 GMT
content-type: text/html; charset=utf-8
vary: X-Requested-With, X-PJAX-Container, Turbo-Frame, Turbo-Visit, Accept-Encoding, Accept, X-Requested-With
etag: W/"9003cc7c076cd2e4e63c92cda44d21b4"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
set-cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1690329907.1675156136; Path=/; Domain=github.com; Expires=Wed, 31 Jan 2024 09:08:56 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Wed, 31 Jan 2024 09:08:56 GMT; HttpOnly; Secure; SameSite=Lax
accept-ranges: bytes
x-github-request-id: C2A6:7AD3:1C0B4C:252C86:63D8DAA7
GET

https://github.com/fluidicon.png

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /fluidicon.png HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:08:39 GMT
content-type: image/png
content-length: 33270
last-modified: Tue, 31 Jan 2023 02:24:27 GMT
etag: "63d87bdb-81f6"
vary: Accept-Encoding, Accept, X-Requested-With
x-frame-options: DENY
accept-ranges: bytes
x-github-request-id: C2A6:7AD3:1C0BD0:252D22:63D8DAA8
GET

https://github.com/remax3r?tab=repositories

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r?tab=repositories HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html, application/xhtml+xml
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r
turbo-frame: user-profile-frame
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:06 GMT
content-type: text/html; charset=utf-8
vary: X-Requested-With, Accept-Encoding, Accept, X-Requested-With
etag: W/"811bc37dd3e9cd192d0cb0d18911abb7"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: C2A6:7AD3:1C0EA0:25304B:63D8DAAA
GET

https://github.com/remax3r/Mars-Stealer-Version-8.2/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Mars-Stealer-Version-8.2/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"22b8c44ab757106fac76a9003e62031b"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EE9:2530B0:63D8DAB3
GET

https://github.com/remax3r/CSGO-PRIVATE-SKINCHANGER/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/CSGO-PRIVATE-SKINCHANGER/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"b9e82cfe1c33ca02af784717bf57069d"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 562
x-github-request-id: C2A6:7AD3:1C0EE9:2530B1:63D8DAB3
GET

https://github.com/remax3r/Crimson-Dota-2-Cheat-Free-DotaPlus-Skills-ESP-Camera-Distance/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Crimson-Dota-2-Cheat-Free-DotaPlus-Skills-ESP-Camera-Distance/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"e2f2d8ca93afc88a68fd21751f7869d6"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530B5:63D8DAB3
GET

https://github.com/remax3r/RobuX-Generator-Made-By-NV3/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/RobuX-Generator-Made-By-NV3/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"af71fe11027982b298af1e0e18d57034"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EE9:2530AF:63D8DAB2
GET

https://github.com/remax3r/OVERWATCH-PRIVATE-CHEAT-AIMBOT-ESP-TRIGGERBOT/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/OVERWATCH-PRIVATE-CHEAT-AIMBOT-ESP-TRIGGERBOT/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"8f0e28de3219619a8d9b8e01c41b5777"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530B4:63D8DAB3
GET

https://github.com/remax3r/Free-Cheat-Crossfire-PH-Orpa-ESP-Aimbot-FastBullet-Zombie/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Free-Cheat-Crossfire-PH-Orpa-ESP-Aimbot-FastBullet-Zombie/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"454a0ea7708e8b597e4a76f89569ea83"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530B8:63D8DAB3
GET

https://github.com/remax3r/Rise-6.0-Client-Minecraft-Cheat-Cracked-Free/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Rise-6.0-Client-Minecraft-Cheat-Cracked-Free/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"3ad99233816774dfa5adf3dff91fe4a4"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530BC:63D8DAB3
GET

https://github.com/remax3r/Team-Fortress-2-Hack-Aimbot-Visuals-Hvh/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Team-Fortress-2-Hack-Aimbot-Visuals-Hvh/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"d63d2339d9463790eb36d0dc5f9a243b"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 562
x-github-request-id: C2A6:7AD3:1C0EEA:2530BB:63D8DAB3
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"006a8103099734a48e528281146a8186"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 560
x-github-request-id: C2A6:7AD3:1C0EEA:2530B9:63D8DAB3
GET

https://github.com/remax3r/Phasmophobia-Cheat-ESP-Ghost-Appear-Infinite-Stamina/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Phasmophobia-Cheat-ESP-Ghost-Appear-Infinite-Stamina/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"9692684e1c6b3c3645c18d25dbe2c6aa"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 562
x-github-request-id: C2A6:7AD3:1C0EEA:2530B7:63D8DAB3
GET

https://github.com/remax3r/UNIVERSAL-HWID-SPOOFER-UPDATED-30.01.2023/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/UNIVERSAL-HWID-SPOOFER-UPDATED-30.01.2023/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"20fa621bb7b8fcacb14b3600f46e6cce"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530BA:63D8DAB3
GET

https://github.com/remax3r/BloxFlip-Towers-Predictor/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/BloxFlip-Towers-Predictor/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"06f46afddeb8d59119bfa260f05ce076"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EE9:2530B2:63D8DAB3
GET

https://github.com/remax3r/Fortnite-RagDoll-V2-PrivCheat-Including-SoftAim-ESP-WALLHACK-TRIGGERBOT-AND-MORE/graphs/participation?h=28&type=sparkline&w=155

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Fortnite-RagDoll-V2-PrivCheat-Including-SoftAim-ESP-WALLHACK-TRIGGERBOT-AND-MORE/graphs/participation?h=28&type=sparkline&w=155 HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"4fc0def5ad602c908d5b811d535de4a7"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 561
x-github-request-id: C2A6:7AD3:1C0EEA:2530B6:63D8DAB3
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html, application/xhtml+xml
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
turbo-frame: user-profile-frame
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:16 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"307894d64e415cf04ed0245462961867"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: C2A6:7AD3:1C1141:25335E:63D8DAB3
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r?tab=repositories
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
upgrade-insecure-requests: 1
if-none-match: W/"307894d64e415cf04ed0245462961867"
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:17 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f6429c0b462b17e6fe02cf72d3ce50dd"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: C2A6:7AD3:1C118B:2533AA:63D8DABB
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/security/overall-count

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/security/overall-count HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f30ceecfd9412dff5b65f9fe906b9eee"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 396
x-github-request-id: C2A6:7AD3:1C11ED:253417:63D8DABE
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/spoofed_commit_check/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/spoofed_commit_check/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/fragment+html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: max-age=14400, private
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 20
x-github-request-id: C2A6:7AD3:1C11ED:253415:63D8DABC
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/overview_actions/main

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/overview_actions/main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 204

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
x-github-request-id: C2A6:7AD3:1C11ED:253419:63D8DABE
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/tree-commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/tree-commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"75a11da44c802486bc6f65640aa48a73"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 33
x-github-request-id: C2A6:7AD3:1C11ED:253416:63D8DABE
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/hovercards/citation/sidebar_partial?tree_name=main

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/hovercards/citation/sidebar_partial?tree_name=main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"17f791c0ffb0b312371de4b18bfad17d"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: b2cba5bf1d8eb190e03235fe73303c61976e2ee4a619a429e4b0f3550f6ec274
accept-ranges: bytes
content-length: 1127
x-github-request-id: C2A6:7AD3:1C11ED:253418:63D8DABE
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/used_by_list

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/used_by_list HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/fragment+html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"75a11da44c802486bc6f65640aa48a73"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 33
x-github-request-id: C2A6:7AD3:1C11ED:25341A:63D8DABE
GET

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb/rollup?direction=sw

firefox.exe

Remote address:

20.207.73.82:443

Request

GET /remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb/rollup?direction=sw HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ewnbK9xZuYGXSDs%2B7G%2BuLlhYdl2jgAJVIIerojcly4S976Pqv4rQrbjhmnJUSXvOY7CDX%2BvAVxZVc9LjrcDAF4RXZdqF1xe6OD8EesAmVRlHatR%2FbOzod28wWn1McqcrcXpg49cnELa4Mg1xBLS%2FR2wubqEuc%2FdntfbHVbWTQjYLRtGVjtlX9ztnGZg8jAeBN3%2FDyhZoZUxlZkjuFteDj1zZhrksliMu%2BUGXVin30W8GE3q8o3bYh1WRv9bvQuMaebVcLy17Zheyyp5KSpe9Og%3D%3D--yZA%2BLssJSIfhJ7s4--A1H%2Bwp8BVIqPkSgn%2FnjeVw%3D%3D
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:18 GMT
content-type: text/fragment+html
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 20
x-github-request-id: C2A6:7AD3:1C1208:253433:63D8DABE
DNS

github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

20.207.73.82
DNS

github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.com

IN AAAA

Response
POST

http://ocsp.digicert.com/

firefox.exe

Remote address:

117.18.237.29:80

Request

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Age: 5790
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:08:56 GMT
Last-Modified: Tue, 31 Jan 2023 07:32:26 GMT
Server: ECS (hhp/9ABB)
X-Cache: HIT
Content-Length: 312
POST

http://ocsp.digicert.com/

firefox.exe

Remote address:

117.18.237.29:80

Request

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Age: 6559
Cache-Control: max-age=137096
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:08:58 GMT
Etag: "63d83593-1d7"
Expires: Wed, 01 Feb 2023 23:13:54 GMT
Last-Modified: Mon, 30 Jan 2023 21:24:35 GMT
Server: ECS (hhp/9ABB)
X-Cache: HIT
Content-Length: 471
POST

http://ocsp.digicert.com/

firefox.exe

Remote address:

117.18.237.29:80

Request

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Age: 4483
Cache-Control: max-age=89279
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:09:24 GMT
Etag: "63d78300-1d7"
Expires: Wed, 01 Feb 2023 09:57:23 GMT
Last-Modified: Mon, 30 Jan 2023 08:42:40 GMT
Server: ECS (hhp/9ABB)
X-Cache: HIT
Content-Length: 471
DNS

cs9.wac.phicdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cs9.wac.phicdn.net

IN AAAA

Response
POST

http://ocsp.digicert.com/

firefox.exe

Remote address:

117.18.237.29:80

Request

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Age: 2167
Cache-Control: max-age=89146
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:08:59 GMT
Etag: "63d78b6e-138"
Expires: Wed, 01 Feb 2023 09:54:45 GMT
Last-Modified: Mon, 30 Jan 2023 09:18:38 GMT
Server: ECS (hhp/9AAB)
X-Cache: HIT
Content-Length: 312
DNS

github.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN A

Response

github.githubassets.com

IN A

185.199.108.154

github.githubassets.com

IN A

185.199.109.154

github.githubassets.com

IN A

185.199.110.154

github.githubassets.com

IN A

185.199.111.154
GET

https://github.githubassets.com/assets/light-719f1193e0c0.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/light-719f1193e0c0.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 27 Oct 2022 18:38:48 GMT
etag: "8ec3214af15081686dd359ec817cbe9c"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 7451435
x-served-by: cache-iad-kiad7000130-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 11521, 22006
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1c6085bbb9d474eda773cf55755d6a53d3e44ae8
content-length: 4467
GET

https://github.githubassets.com/assets/wp-runtime-683e86ceec09.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/wp-runtime-683e86ceec09.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 17:00:08 GMT
etag: "8b887638d0149cbd9e8c4719fb8dd896"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2754322
x-served-by: cache-iad-kcgs7200107-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2500, 24214
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 37a2b09d453e54831f9084626e77bc52dcbe1f22
content-length: 5099
GET

https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-297da6-aaa32681a0b3.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-297da6-aaa32681a0b3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Tue, 31 Jan 2023 00:39:59 GMT
etag: "cb08823a227620078528e0cb73bff035"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 30399
x-served-by: cache-iad-kcgs7200082-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 80, 1446
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 74dc87ddeb5114c0191256561ee71969cc5297ac
content-length: 6798
GET

https://github.githubassets.com/assets/environment-3424f91b6daa.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/environment-3424f91b6daa.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 22:19:22 GMT
etag: "d780d0014cc1f2e6824dbe90d7496dc5"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 902646
x-served-by: cache-iad-kjyo7100121-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 32, 3315
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: c37a313cd3f69c288def9352fa464785ed935c2c
content-length: 5659
GET

https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-58d8ed1c5cb7.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-58d8ed1c5cb7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 11 Jan 2023 19:52:49 GMT
etag: "124a31dc19e4a529c2b10418a669dc36"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1666119
x-served-by: cache-iad-kjyo7100044-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 393, 22491
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e9e8d6319e06d4b8eddd887cd5217ddd1b2cebc8
content-length: 3480
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_details-dialog-elemen-63debe-4a2f37f7419e.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_details-dialog-elemen-63debe-4a2f37f7419e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Tue, 18 Oct 2022 19:01:08 GMT
etag: "1451eb0b89d10e8ad1802d9f30edf39a"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 8954064
x-served-by: cache-iad-kjyo7100156-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 13591, 20996
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 55ba2ce2cc339d649d7ec29f4093f23ddf003ee0
content-length: 5464
GET

https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-6afc16-fa4f01d20b81.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-6afc16-fa4f01d20b81.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 11 Jan 2023 03:45:40 GMT
etag: "a9168d414afc1e9c4b49848764bb3764"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1733316
x-served-by: cache-iad-kiad7000040-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 1599, 22553
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3529059436008adbc2838c5fec88d04fdb0ef9c3
content-length: 5845
GET

https://github.githubassets.com/assets/vendors-node_modules_github_clipboard-copy-element_dist_index_esm_js-node_modules_github_mark-f079ea-692b8e7bcdfd.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_clipboard-copy-element_dist_index_esm_js-node_modules_github_mark-f079ea-692b8e7bcdfd.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 05 Jan 2023 21:29:39 GMT
etag: "34319d8e335f15eb942d973323fec1be"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2073554
x-served-by: cache-iad-kcgs7200022-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 5444, 22243
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e28a62703c89755c7f4dd529d0d3c0d7af77cb50
content-length: 3935
GET

https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_text-ex-3415a8-72e8230400a2.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_text-ex-3415a8-72e8230400a2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Tue, 10 Jan 2023 15:09:42 GMT
etag: "60d22091d0f968cbf85b6903a384eb70"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1733316
x-served-by: cache-iad-kiad7000137-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 1673, 22546
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cac48a39836d684705bc4982f0f2558ca46ac8f6
content-length: 3840
GET

https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b4f804-93a75d194dbb.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b4f804-93a75d194dbb.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 26 Jan 2023 19:22:40 GMT
etag: "3dae3952b4430b5c5da0c5a20fda34b8"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 395007
x-served-by: cache-iad-kjyo7100028-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 59, 3835
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2b95530775f9c709981dbab61afc7ebed7531dbe
content-length: 9935
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_view-components_app_components_primer_primer_js-node_modules_gith-6a1af4-0b90cf4b5716.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_primer_view-components_app_components_primer_primer_js-node_modules_gith-6a1af4-0b90cf4b5716.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 21:42:02 GMT
etag: "56aefcc726c6c0888baaea2732f360df"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 41067
x-served-by: cache-iad-kiad7000101-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 3, 2416
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a59de535772deffafeed944aff025cee0c096f42
content-length: 18827
GET

https://github.githubassets.com/assets/github-elements-6e3a1be1032e.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/github-elements-6e3a1be1032e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 14 Jul 2022 03:28:38 GMT
etag: "b4f8ff1531185872d0e5c72623b2f668"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 10213382
x-served-by: cache-iad-kiad7000050-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 12167, 20841
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 5a073b33ef8c47a797c4bd3dfff0e4b04268ab3d
content-length: 4709
GET

https://github.githubassets.com/assets/element-registry-1fbf1b303705.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/element-registry-1fbf1b303705.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 23:11:32 GMT
etag: "584f1032670b4981f376016a3194a600"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 35672
x-served-by: cache-iad-kjyo7100068-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 19, 1606
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e2482e44f96cf1980335bd593eb1e897342c6545
content-length: 6367
GET

https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-e954e8c01c93.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_lit-html_lit-html_js-e954e8c01c93.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 22:17:02 GMT
etag: "4e99c11d494eb71c93412ebfa0d2b4d7"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 643773
x-served-by: cache-iad-kcgs7200030-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 610, 28314
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 4b8f0ca8c07576497d4cdbf15194f6cec2d29428
content-length: 4966
GET

https://github.githubassets.com/assets/vendors-node_modules_manuelpuyol_turbo_dist_turbo_es2017-esm_js-ac3bd901e26b.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_manuelpuyol_turbo_dist_turbo_es2017-esm_js-ac3bd901e26b.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 14 Dec 2022 19:22:13 GMT
etag: "5b1bf2c3e6fda73e9a148420327e49b0"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 4109740
x-served-by: cache-iad-kiad7000032-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2253, 22675
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: f6ca9e602aba83053349e3d4bdb36ffc0d89d5fb
content-length: 19317
GET

https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-24c0cfc509a8.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-24c0cfc509a8.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 27 Jan 2023 19:54:47 GMT
etag: "fd0c8cd59ef11daba1a26eb469dd571e"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 306707
x-served-by: cache-iad-kiad7000033-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 18, 16462
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 510da754566abe40d9b341ed5e353f1ffc3eba92
content-length: 4405
GET

https://github.githubassets.com/assets/vendors-node_modules_github_hotkey_dist_index_js-node_modules_github_hydro-analytics-client_d-047034-4198c9d47011.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_hotkey_dist_index_js-node_modules_github_hydro-analytics-client_d-047034-4198c9d47011.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 14 Jul 2022 03:28:37 GMT
etag: "a85f52a530e3c6fb16c3cd46c8d5d13d"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 6974749
x-served-by: cache-iad-kjyo7100132-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 6472, 20683
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7b6124be1e1fcde58884a52720f4c1fa288d3752
content-length: 3426
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_template-parts_lib_-273494-9dca884d6b8e.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_template-parts_lib_-273494-9dca884d6b8e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 22:17:02 GMT
etag: "ca0bc93ab84450c20ba4327fd4f763de"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 643773
x-served-by: cache-iad-kiad7000101-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 20, 28717
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a355914cf7af099940ebce95c200cccc59f37756
content-length: 17689
GET

https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-c15b39-7d4cbe4ffc8c.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-c15b39-7d4cbe4ffc8c.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Wed, 18 Jan 2023 05:00:05 GMT
etag: "484adf8579cd8c68de9fa6b5081a4c6c"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1137880
x-served-by: cache-iad-kjyo7100089-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 34, 3209
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a2cbe16844c0674ff6ef13eca18e8f834099f85b
content-length: 3103
GET

https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-be84ec1f2e05.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_updatable-content_ts-be84ec1f2e05.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 23:11:22 GMT
etag: "20f07280f552f34cbf8b567df71face2"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 35672
x-served-by: cache-iad-kiad7000055-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 24, 1604
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ace4d793f43ad964fdee738d5486de0d3273ba94
content-length: 3523
GET

https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-f0d967a97d48.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-f0d967a97d48.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 19 Jan 2023 01:26:55 GMT
etag: "2d6c8a533212511447c3027857ff5290"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1064315
x-served-by: cache-iad-kcgs7200161-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 56, 26134
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8e136af56fec216d2c20c5c0c41173ea08c456b9
content-length: 3418
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_socket-channel_ts-5da1f39e59d1.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_socket-channel_ts-5da1f39e59d1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 19 Jan 2023 20:13:21 GMT
etag: "bbd9222b07ef2af50945185d76b3382e"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 996690
x-served-by: cache-iad-kcgs7200078-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 25, 3470
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3ce8515730eddd3237e1631ecb29953fc6a4fd0f
content-length: 2930
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_keyboard-shortcuts-helper_ts-app_assets_modules_github_be-d820ce-0682979ffa29.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_keyboard-shortcuts-helper_ts-app_assets_modules_github_be-d820ce-0682979ffa29.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 26 Jan 2023 19:22:22 GMT
etag: "2c4ceec49e81d0b025f1ac345f96bd68"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 395007
x-served-by: cache-iad-kjyo7100064-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 55, 3845
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 506ac219e3291c4424481ca3fb629fcb7645b6eb
content-length: 7256
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_user-content_ts-app_assets_modules_github_blob-anchor_ts--b39cba-0e34333f0071.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_user-content_ts-app_assets_modules_github_blob-anchor_ts--b39cba-0e34333f0071.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Wed, 18 Jan 2023 05:00:02 GMT
etag: "8901e0ea060635ed9b29dfbb38e80363"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1137880
x-served-by: cache-iad-kiad7000087-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 30, 3212
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 5317b69d374a834486ad8a940a3ed16213c1a377
content-length: 4949
GET

https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9df1e61e03a4.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9df1e61e03a4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 18 Jan 2023 05:00:02 GMT
etag: "aeff2eb745b34d0fdea68ee24f094796"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 750712
x-served-by: cache-iad-kiad7000150-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2217, 2965
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 67149960bdfa77aa5b8a18640f0c45d36710183b
content-length: 3355
GET

https://github.githubassets.com/assets/behaviors-9ac7bdc48fd2.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/behaviors-9ac7bdc48fd2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 26 Jan 2023 19:22:26 GMT
etag: "0d499c6eee64c69509cc5243e1d69f59"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 395007
x-served-by: cache-iad-kjyo7100121-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 62, 3855
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7fffe175ea19b6af306f978c103ab936ec395451
content-length: 62153
GET

https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-596c6d852b03.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-596c6d852b03.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 04 Jan 2023 19:50:40 GMT
etag: "5869d7759b2d2f943b0e4efc4ad2d294"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2073555
x-served-by: cache-iad-kcgs7200042-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 5280, 22411
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1fd6798d192c9cad40ef899ec01db6c82c3d9680
content-length: 4295
GET

https://github.githubassets.com/assets/notifications-global-e6860013c1f3.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/notifications-global-e6860013c1f3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 18 Jan 2023 05:00:28 GMT
etag: "ae99d3f2e30f9db0a3a20034997ffd96"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 750712
x-served-by: cache-iad-kjyo7100127-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 853, 2964
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3c3905fb374ab34774c6083d8124932105a03d1f
content-length: 3436
GET

https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-aa2ce822bc0d.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-aa2ce822bc0d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 27 Oct 2022 18:39:06 GMT
etag: "483399e5472950f666be0478f71ee4cd"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2742914
x-served-by: cache-iad-kcgs7200126-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 13258, 4986
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: c8b4858848668a3d02cfc386fdb4ac314038a19a
content-length: 3192
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_primer_behaviors_dist_esm_-b34105-fabcc73c45cb.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_primer_behaviors_dist_esm_-b34105-fabcc73c45cb.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Wed, 04 Jan 2023 19:50:41 GMT
etag: "82a1828f30e2a5a434db97bc7137b3fe"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2294102
x-served-by: cache-iad-kjyo7100040-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 18, 4089
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1f4e1dc7adc8e604ccd5364fc0daee6a533e2b68
content-length: 5829
GET

https://github.githubassets.com/assets/profile-fe4786681e38.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/profile-fe4786681e38.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 27 Jan 2023 19:54:33 GMT
etag: "b38bb571e8b285941be7a700d596cb68"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 64171
x-served-by: cache-iad-kcgs7200021-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 53, 496
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: d3f640470b878c6419f1b5b336088d79c5de5e4f
content-length: 8949
GET

https://github.githubassets.com/assets/sessions-e80dc136a7ec.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/sessions-e80dc136a7ec.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 22:19:39 GMT
etag: "dae4b1ab6510a1c631bfcfb0e4fcfdcf"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 750712
x-served-by: cache-iad-kiad7000179-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 1836, 2402
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a29a4b6e96055d1c429a3c3a2e707671006e253f
content-length: 6415
GET

https://github.githubassets.com/assets/dark-0c343b529849.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/dark-0c343b529849.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 27 Oct 2022 18:38:36 GMT
etag: "48c53d44b57626128ca4e9e0d0ea6dec"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2073554
x-served-by: cache-iad-kjyo7100044-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2112, 22249
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2bde4cdbed512f08ce1b45c337c35833cb4cb858
content-length: 4395
GET

https://github.githubassets.com/assets/primer-3e0c23f0f191.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/primer-3e0c23f0f191.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 22:56:43 GMT
etag: "b5d0b3058e97feca3a694d7a152495e2"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 641378
x-served-by: cache-iad-kiad7000083-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2, 28778
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 64a1a14b9abc19dbc22cf21322229362396194d1
content-length: 45287
GET

https://github.githubassets.com/assets/github-2bd0741c348f.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/github-2bd0741c348f.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 23:11:35 GMT
etag: "4d8b7a94ebd1ab99305c54b190ecd212"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 35681
x-served-by: cache-iad-kiad7000089-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 36, 1964
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2ac16db2f517130ceb71023d6e398e3a6e092328
content-length: 31775
GET

https://github.githubassets.com/assets/global-c309e0470d2c.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/global-c309e0470d2c.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 22:16:40 GMT
etag: "de93b6ee0f936e5fab03a6846bac17de"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 643773
x-served-by: cache-iad-kiad7000027-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 23, 28512
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6038356cb8dd0a1b0d6bd8437c6352c135263df0
content-length: 36161
GET

https://github.githubassets.com/assets/profile-085697a49485.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/profile-085697a49485.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 05 Jan 2023 17:13:27 GMT
etag: "8120a3ddf3285c8546e04c3e007532f9"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 1242141
x-served-by: cache-iad-kiad7000048-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 492, 4145
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: aefdebf22551c6fb4c9dc5fd0514b3e52664757e
content-length: 2097
GET

https://github.githubassets.com/images/modules/profile/achievements/starstruck-default.png

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/profile/achievements/starstruck-default.png HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Fri, 04 Feb 2022 15:42:30 GMT
etag: "7709e911992939f58fdd799cf6793162"
content-type: image/png
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 5594
x-served-by: cache-iad-kjyo7100097-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2371, 7
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 33791560e014f94dc93455fd922fc418fec82e88
content-length: 71477
GET

https://github.githubassets.com/images/modules/profile/profile-first-repo.svg

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/profile/profile-first-repo.svg HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Thu, 19 Nov 2020 18:55:55 GMT
etag: "ededd6327b161f8c9dfa93d0a270e770"
content-type: image/svg+xml
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 2835
x-served-by: cache-iad-kcgs7200161-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 20, 2
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 9f6f79623d042fa653daaab5ba663419c117c084
content-length: 23158
GET

https://github.githubassets.com/images/modules/profile/profile-joined-github.svg

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /images/modules/profile/profile-joined-github.svg HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Thu, 19 Nov 2020 18:55:55 GMT
etag: "f55cd9b326bfcf52653d02fd9afc3447"
content-type: image/svg+xml
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
age: 5563
x-served-by: cache-iad-kiad7000055-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 39, 2
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b35d58191c754382c7239bb6c45db4f63db9b21f
content-length: 32864
GET

https://github.githubassets.com/assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-8d9d1aec570e.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-8d9d1aec570e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Fri, 05 Aug 2022 09:31:15 GMT
etag: "a658197484af6c7b3fb8b9c48805033d"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:58 GMT
age: 13760108
x-served-by: cache-iad-kjyo7100026-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 3102, 2507
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 41a8a68239aca9d14ec3358ea9c4ad82194989d5
content-length: 587
GET

https://github.githubassets.com/assets/chunk-app_components_profiles_contribution-graph-celebration-element_ts-cedd4dbe8ba7.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/chunk-app_components_profiles_contribution-graph-celebration-element_ts-cedd4dbe8ba7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Tue, 24 Jan 2023 02:11:29 GMT
etag: "4511b9ba7f0c45fb2666f95562a8fa69"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:58 GMT
age: 629178
x-served-by: cache-iad-kiad7000146-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 52, 293
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 27d571d142ef3c363ad3f02c39d234416cf898d6
content-length: 6762
GET

https://github.githubassets.com/favicons/favicon.svg

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /favicons/favicon.svg HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Tue, 31 Mar 2020 05:17:24 GMT
etag: "6d802f68df0c09a4997cfd28eeafd9ff"
content-type: image/svg+xml
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:58 GMT
age: 3457
x-served-by: cache-iad-kjyo7100171-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 19243, 56
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2c79dc18b69df95fe69eafebd1d03677bd38ac23
content-length: 959
GET

https://github.githubassets.com/assets/light-719f1193e0c0.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/light-719f1193e0c0.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 27 Oct 2022 18:38:48 GMT
etag: "8ec3214af15081686dd359ec817cbe9c"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 7451454
x-served-by: cache-iad-kiad7000130-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 11521, 22009
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 378912032e0fa17cabe9256f4521345053ff6c36
content-length: 4467
GET

https://github.githubassets.com/assets/dark-0c343b529849.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/dark-0c343b529849.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Thu, 27 Oct 2022 18:38:36 GMT
etag: "48c53d44b57626128ca4e9e0d0ea6dec"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 2073573
x-served-by: cache-iad-kjyo7100044-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2112, 22252
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b27dce0e85d2cf1b57912f73b00ba56dc067ea7b
content-length: 4395
GET

https://github.githubassets.com/assets/primer-3e0c23f0f191.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/primer-3e0c23f0f191.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 22:56:43 GMT
etag: "b5d0b3058e97feca3a694d7a152495e2"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 641397
x-served-by: cache-iad-kiad7000083-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2, 28782
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ab0877ab4f5c86a74f36f9d95f4b9301d8e21c04
content-length: 45287
GET

https://github.githubassets.com/assets/code-85d351263652.css

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/code-85d351263652.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 17:57:26 GMT
etag: "ecf773d78d02831eb965d656b0d8a576"
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 918521
x-served-by: cache-iad-kiad7000127-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 73, 16626
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1b56c92e6a8e07bf52ca32653060bf3478ac08de
content-length: 4009
GET

https://github.githubassets.com/assets/vendors-node_modules_optimizely_optimizely-sdk_dist_optimizely_browser_es_min_js-node_modules-77839b-e6c57f82d6e7.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_optimizely_optimizely-sdk_dist_optimizely_browser_es_min_js-node_modules-77839b-e6c57f82d6e7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 19 Jan 2023 16:59:04 GMT
etag: "f7041307d81f55efb5b68e894890db94"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 1008403
x-served-by: cache-iad-kjyo7100091-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 26, 2670
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: f748f944c2ffcbd9114f66bbec9dc2b4c5305387
content-length: 31371
GET

https://github.githubassets.com/assets/optimizely-564b43d06308.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/optimizely-564b43d06308.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 22:19:35 GMT
etag: "144b8d235e8b0e3f323544f629d6253d"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 902661
x-served-by: cache-iad-kcgs7200050-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 76, 1934
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e802b787229cf4164424046350685a2a4a6716d1
content-length: 6270
GET

https://github.githubassets.com/assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_memoize_dist_esm_index_-ced8cc-ffd5e4d6ee17.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_memoize_dist_esm_index_-ced8cc-ffd5e4d6ee17.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Tue, 13 Dec 2022 20:30:11 GMT
etag: "ebd01c347e2d6ca17a409c313677dc7d"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 4111244
x-served-by: cache-iad-kiad7000083-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 4204, 18553
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 541731754c4fefc4191ebbbe74d6091f205f94c2
content-length: 6054
GET

https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-70450e-bdbaf1c3071b.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-70450e-bdbaf1c3071b.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 04 Jan 2023 19:50:41 GMT
etag: "c9c6a968e9df538b61d3b4d6d4ca7cdf"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 1971273
x-served-by: cache-iad-kiad7000177-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 2751, 14690
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8d8645581cf64de5f75f84399c45f15efd861ac6
content-length: 5185
GET

https://github.githubassets.com/assets/app_assets_modules_github_ref-selector_ts-b6515c7907be.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/app_assets_modules_github_ref-selector_ts-b6515c7907be.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 22:19:09 GMT
etag: "225ed561cadb9a15ffd0c4ca4ef1860a"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 902666
x-served-by: cache-iad-kiad7000114-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 11, 2819
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 53a197aa4d8dc37a99f7f9c6904a93479bc0cc6e
content-length: 4688
GET

https://github.githubassets.com/assets/codespaces-2773ab1f4803.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/codespaces-2773ab1f4803.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 19 Jan 2023 16:58:33 GMT
etag: "14f9644c16c9ecab6fe68f8f27e266fd"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 1008396
x-served-by: cache-iad-kiad7000029-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 19, 2097
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1c0d0cd977e081bd4b1c66f573124c205dfd5347
content-length: 6497
GET

https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_mini-throt-a33094-133bfae4158f.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_mini-throt-a33094-133bfae4158f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Thu, 08 Dec 2022 19:53:11 GMT
etag: "fd9ab39786d2bba2294a2daa1f9ef926"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 2721181
x-served-by: cache-iad-kiad7000158-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 90, 19526
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 705c207352e93ce8cebf424ca42b424b1e726dcf
content-length: 6451
GET

https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_mini-th-85225b-d5c5eb0b8bb2.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_mini-th-85225b-d5c5eb0b8bb2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 18 Nov 2022 08:15:12 GMT
etag: "b37d1f64232478fb0ede44293f863fba"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 2737292
x-served-by: cache-iad-kiad7000138-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 3516, 15203
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: aca44e20bdc38a48ee969e2ae9a9627dbfe5ae89
content-length: 6586
GET

https://github.githubassets.com/assets/repositories-1742d6251559.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/repositories-1742d6251559.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Wed, 25 Jan 2023 17:41:48 GMT
etag: "12ad45a6db778f478be207e613ccbbea"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 415125
x-served-by: cache-iad-kcgs7200107-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 24, 2553
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: d3a214d88bad45029da1b51fa8a714a387f1cc89
content-length: 19184
GET

https://github.githubassets.com/assets/topic-suggestions-a1ce486d7931.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/topic-suggestions-a1ce486d7931.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

cache-control: public, max-age=31536000
last-modified: Wed, 18 Jan 2023 05:00:43 GMT
etag: "2c110e8ec3f12bd3bd203cd13091d213"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 750733
x-served-by: cache-iad-kjyo7100059-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 676, 1710
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e55977f50f6917161a7994bd2a3ebfcef4d3cdcb
content-length: 4152
GET

https://github.githubassets.com/assets/code-menu-a2afa0bcf33d.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/code-menu-a2afa0bcf33d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Wed, 25 Jan 2023 17:41:30 GMT
etag: "28f8958a5f263c8e3253e64ce1a2272f"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 405763
x-served-by: cache-iad-kiad7000128-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 9, 2328
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a41dd2d5fad81a8a8c03eda484814638a73316a5
content-length: 4923
GET

https://github.githubassets.com/assets/chunk-app_components_files_readme-toc-element_ts-c9fa70297b98.js

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /assets/chunk-app_components_files_readme-toc-element_ts-c9fa70297b98.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
origin: https://github.com
te: trailers

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-max-age: 3600
cache-control: public, max-age=31536000
last-modified: Fri, 20 Jan 2023 22:19:15 GMT
etag: "e3dfb1fa3bfaf3813a3d88b6014f2a63"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:17 GMT
age: 902657
x-served-by: cache-iad-kcgs7200062-IAD, cache-ams21080-AMS
x-cache: HIT, HIT
x-cache-hits: 3, 1441
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 88c5661e118946e004c9c8ee8423118791ee50f5
content-length: 2371
DNS

github.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN A

Response

github.githubassets.com

IN A

185.199.110.154

github.githubassets.com

IN A

185.199.111.154

github.githubassets.com

IN A

185.199.108.154

github.githubassets.com

IN A

185.199.109.154
DNS

github.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

github.githubassets.com

IN AAAA

Response
DNS

avatars.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

avatars.githubusercontent.com

IN A

Response

avatars.githubusercontent.com

IN A

185.199.111.133

avatars.githubusercontent.com

IN A

185.199.108.133

avatars.githubusercontent.com

IN A

185.199.109.133

avatars.githubusercontent.com

IN A

185.199.110.133
GET

https://avatars.githubusercontent.com/u/123869172?s=64&v=4

firefox.exe

Remote address:

185.199.111.133:443

Request

GET /u/123869172?s=64&v=4 HTTP/2.0
host: avatars.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
te: trailers

Response

HTTP/2.0 200

cache-control: max-age=300
content-security-policy: default-src 'none'
content-type: image/jpeg
etag: "a85ca8a762d819634c55b7c325270c491da361373e1081aba8581b1570a40a22"
last-modified: Mon, 30 Jan 2023 12:36:25 GMT
strict-transport-security: max-age=31557600
timing-allow-origin: https://github.com
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 2EAE:100F:42587A:4B0B9F:63D8013C
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
via: 1.1 varnish
x-served-by: cache-ams21026-AMS
x-cache: HIT
x-cache-hits: 1
x-timer: S1675156138.774197,VS0,VE1
access-control-allow-origin: *
x-fastly-request-id: 7a4b4f23460e03fc09b9c299fbf32059d368a7dd
expires: Tue, 31 Jan 2023 09:13:57 GMT
source-age: 55661
vary: Authorization,Accept-Encoding
content-length: 45543
GET

https://avatars.githubusercontent.com/u/123869172?v=4

firefox.exe

Remote address:

185.199.111.133:443

Request

GET /u/123869172?v=4 HTTP/2.0
host: avatars.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
te: trailers

Response

HTTP/2.0 200

cache-control: max-age=300
content-security-policy: default-src 'none'
content-type: image/jpeg
etag: "b6a36084b502fa3d179686e68feecc1796f6d26c403d89372b42bbf70d24efdc"
last-modified: Mon, 30 Jan 2023 12:36:25 GMT
strict-transport-security: max-age=31557600
timing-allow-origin: https://github.com
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: A78A:10593:24D19D:27FF7F:63D8DAA9
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:08:57 GMT
via: 1.1 varnish
x-served-by: cache-ams21026-AMS
x-cache: MISS
x-cache-hits: 0
x-timer: S1675156138.773168,VS0,VE199
access-control-allow-origin: *
x-fastly-request-id: dda277a14ce560d7aeafeda198662f5a34ca7712
expires: Tue, 31 Jan 2023 09:13:57 GMT
source-age: 0
vary: Authorization,Accept-Encoding
content-length: 1940
GET

https://user-images.githubusercontent.com/116565324/197624764-11e668d9-6737-462a-a547-4f70ba622869.png

firefox.exe

Remote address:

185.199.111.133:443

Request

GET /116565324/197624764-11e668d9-6737-462a-a547-4f70ba622869.png HTTP/2.0
host: user-images.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
te: trailers

Response

HTTP/2.0 200

cache-control: max-age=300
content-security-policy: default-src 'none'
content-type: image/jpeg
etag: "ad5e9189ff28ca8d6d415cc66c4b946686f9f22d20aaa9b99f94371ce42e7a93"
last-modified: Mon, 30 Jan 2023 12:36:25 GMT
strict-transport-security: max-age=31557600
timing-allow-origin: https://github.com
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 71A2:C100:1698DB2:183898F:63D7CFE7
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:18 GMT
via: 1.1 varnish
x-served-by: cache-ams21026-AMS
x-cache: HIT
x-cache-hits: 1
x-timer: S1675156159.600759,VS0,VE1
access-control-allow-origin: *
x-fastly-request-id: b484da34ff82975cfc88fdec3df3a8fce5df3b1f
expires: Tue, 31 Jan 2023 09:14:18 GMT
source-age: 68311
vary: Authorization,Accept-Encoding
content-length: 1400
GET

https://avatars.githubusercontent.com/u/123869172?s=48&v=4

firefox.exe

Remote address:

185.199.111.133:443

Request

GET /u/123869172?s=48&v=4 HTTP/2.0
host: avatars.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
te: trailers

Response

HTTP/2.0 200

last-modified: Mon, 24 Oct 2022 20:39:18 GMT
etag: "54360955fec161540ace2c1a9fd65e9a"
cache-control: max-age=2592000
content-type: image/png
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:18 GMT
via: 1.1 varnish
age: 1
x-served-by: cache-ams21026-AMS
x-cache: MISS
x-cache-hits: 0
x-timer: S1675156157.488759,VS0,VE1123
content-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; sandbox;
x-fastly-request-id: 06b71cda00db93a6336f9fa5826a6bb99df60946
server: GitHub Cloud
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
timing-allow-origin: https://github.com
content-length: 2947776
DNS

avatars.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

avatars.githubusercontent.com

IN A

Response

avatars.githubusercontent.com

IN A

185.199.108.133

avatars.githubusercontent.com

IN A

185.199.109.133

avatars.githubusercontent.com

IN A

185.199.110.133

avatars.githubusercontent.com

IN A

185.199.111.133
DNS

avatars.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

avatars.githubusercontent.com

IN AAAA

Response

avatars.githubusercontent.com

IN AAAA

2606:50c0:8000::154

avatars.githubusercontent.com

IN AAAA

2606:50c0:8001::154

avatars.githubusercontent.com

IN AAAA

2606:50c0:8002::154

avatars.githubusercontent.com

IN AAAA

2606:50c0:8003::154
DNS

collector.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

collector.github.com

IN A

Response

collector.github.com

IN CNAME

glb-db52c2cf8be544.github.com

glb-db52c2cf8be544.github.com

IN A

140.82.114.22
POST

https://collector.github.com/github/collect

firefox.exe

Remote address:

140.82.114.22:443

Request

POST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
content-type: text/plain;charset=UTF-8
content-length: 673
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:08:59 GMT
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-request-id: b0653044-a2c5-43b8-b4f4-6e3f395822b1
x-runtime: 0.004057
strict-transport-security: max-age=631138519
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-github-backend: Kubernetes
x-github-request-id: C2B1:0C4F:6CD4C:50A267:63D8DAAA
POST

https://collector.github.com/github/collect

firefox.exe

Remote address:

140.82.114.22:443

Request

POST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
content-type: text/plain;charset=UTF-8
content-length: 730
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:07 GMT
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-request-id: fe8bcdc4-f8bf-44da-893a-77040cd9d263
x-runtime: 0.004142
strict-transport-security: max-age=631138519
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-github-backend: Kubernetes
x-github-request-id: C2B1:0C4F:6CD87:50A5B5:63D8DAAB
POST

https://collector.github.com/github/collect

firefox.exe

Remote address:

140.82.114.22:443

Request

POST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
content-type: text/plain;charset=UTF-8
content-length: 1185
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:19 GMT
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-request-id: 05e84856-9e59-4c22-a12b-1b4e51fef989
x-runtime: 0.003479
strict-transport-security: max-age=631138519
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-github-backend: Kubernetes
x-github-request-id: C2B1:0C4F:6CE37:50AAAE:63D8DAB3
DNS

glb-db52c2cf8be544.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

glb-db52c2cf8be544.github.com

IN A

Response

glb-db52c2cf8be544.github.com

IN A

140.82.113.22
DNS

glb-db52c2cf8be544.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

glb-db52c2cf8be544.github.com

IN AAAA

Response
DNS

api.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.github.com

IN A

Response

api.github.com

IN A

20.207.73.85
POST

https://api.github.com/_private/browser/stats

firefox.exe

Remote address:

20.207.73.85:443

Request

POST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
content-type: text/plain;charset=UTF-8
content-length: 28215
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:00 GMT
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1675159740
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
x-github-request-id: C2B2:1EEF:E9D01:11B52B:63D8DAAA
POST

https://api.github.com/_private/browser/stats

firefox.exe

Remote address:

20.207.73.85:443

Request

POST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
content-type: text/plain;charset=UTF-8
content-length: 751
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:06 GMT
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1675159746
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
x-github-request-id: C2B2:1EEF:E9EA0:11B6E3:63D8DAAB
POST

https://api.github.com/_private/browser/stats

firefox.exe

Remote address:

20.207.73.85:443

Request

POST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
content-type: text/plain;charset=UTF-8
content-length: 633
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:07 GMT
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1675159747
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
x-github-request-id: C2B2:1EEF:E9EE2:11B730:63D8DAB2
POST

https://api.github.com/_private/browser/stats

firefox.exe

Remote address:

20.207.73.85:443

Request

POST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
content-type: text/plain;charset=UTF-8
content-length: 33612
origin: https://github.com
cookie: _octo=GH1.1.1690329907.1675156136
cookie: logged_in=no
cookie: preferred_color_mode=undefined
cookie: tz=UTC
te: trailers

Response

HTTP/2.0 200

server: GitHub.com
date: Tue, 31 Jan 2023 09:09:19 GMT
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1675159759
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
x-github-request-id: C2B2:1EEF:EA10B:11B981:63D8DAB3
DNS

api.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.github.com

IN A

Response

api.github.com

IN A

20.207.73.85
DNS

api.github.com

firefox.exe

Remote address:

8.8.8.8:53

Request

api.github.com

IN AAAA

Response
DNS

user-images.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

user-images.githubusercontent.com

IN A

Response

user-images.githubusercontent.com

IN A

185.199.111.133

user-images.githubusercontent.com

IN A

185.199.108.133

user-images.githubusercontent.com

IN A

185.199.110.133

user-images.githubusercontent.com

IN A

185.199.109.133
DNS

user-images.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

user-images.githubusercontent.com

IN A

Response

user-images.githubusercontent.com

IN A

185.199.108.133

user-images.githubusercontent.com

IN A

185.199.110.133

user-images.githubusercontent.com

IN A

185.199.109.133

user-images.githubusercontent.com

IN A

185.199.111.133
DNS

user-images.githubusercontent.com

firefox.exe

Remote address:

8.8.8.8:53

Request

user-images.githubusercontent.com

IN AAAA

Response

user-images.githubusercontent.com

IN AAAA

2606:50c0:8000::154

user-images.githubusercontent.com

IN AAAA

2606:50c0:8001::154

user-images.githubusercontent.com

IN AAAA

2606:50c0:8002::154

user-images.githubusercontent.com

IN AAAA

2606:50c0:8003::154
DNS

anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

anonfiles.com

IN A

Response

anonfiles.com

IN A

45.154.253.150

anonfiles.com

IN A

45.154.253.152

anonfiles.com

IN A

45.154.253.151
GET

https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /p9W4ofU9y7/RDR2CHEAT_rar HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More
Connection: keep-alive
Upgrade-Insecure-Requests: 1

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdc: Yes
cache-control: public, max-age=60
x-oe: N
Content-Encoding: gzip
GET

https://anonfiles.com/css/anonfiles.css?1668606177

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /css/anonfiles.css?1668606177 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4732
Content-Encoding: gzip
GET

https://anonfiles.com/static/logo.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /static/logo.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: image/png
Content-Length: 18441
Connection: keep-alive
last-modified: Fri, 16 Sep 2022 20:22:41 GMT
etag: "6324db11-4809"
GET

https://anonfiles.com/img/flags/24/in.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/in.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4087
accept-ranges: bytes
DNS

anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

anonfiles.com

IN A

Response

anonfiles.com

IN A

45.154.253.151

anonfiles.com

IN A

45.154.253.150

anonfiles.com

IN A

45.154.253.152
DNS

anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

anonfiles.com

IN AAAA

Response

anonfiles.com

IN AAAA

2001:678:b30:4::e

anonfiles.com

IN AAAA

2001:678:b30:4::c

anonfiles.com

IN AAAA

2001:678:b30:4::d
DNS

a1887.dscq.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1887.dscq.akamai.net

IN A

Response

a1887.dscq.akamai.net

IN A

88.221.25.162

a1887.dscq.akamai.net

IN A

88.221.25.176
DNS

a1887.dscq.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a1887.dscq.akamai.net

IN AAAA

Response

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:b200::1748:fc93

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:b200::1748:fc9b
GET

https://anonfiles.com/js/app.js?1668606177

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /js/app.js?1668606177 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3764
Content-Encoding: gzip
GET

https://anonfiles.com/img/flags/24/br.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/br.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: image/png
Content-Length: 1115
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4372
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/no.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/no.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 611
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4064
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/pl.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/pl.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 347
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3366
accept-ranges: bytes
GET

https://anonfiles.com/sw_anonfiles.js?T0d5RGQUZU53U3x1SmZIbWVVZlIsJUgiXH8jVCVUfXBUcAZ%2EI1R9UXd%2BVHFceCNMfV1%2Ecx0iXW1rW3FWKyNNcVR8ak8iUylqTSYFd2pBJ1AsakFyVHhzHXNXeyNOIkZjZQozRmNlDSwBLCgPIQs8aRorCW1rW3VUYXJbaAIuKwohSCkmFTcBYyEYKBcqGg

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /sw_anonfiles.js?T0d5RGQUZU53U3x1SmZIbWVVZlIsJUgiXH8jVCVUfXBUcAZ%2EI1R9UXd%2BVHFceCNMfV1%2Ecx0iXW1rW3FWKyNNcVR8ak8iUylqTSYFd2pBJ1AsakFyVHhzHXNXeyNOIkZjZQozRmNlDSwBLCgPIQs8aRorCW1rW3VUYXJbaAIuKwohSCkmFTcBYyEYKBcqGg HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:24 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 33908
Content-Encoding: gzip
GET

https://anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668603321

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/favicon/favicon-32x32-anonfiles.png?1668603321 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:24 GMT
Content-Type: image/png
Content-Length: 1309
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 1986
accept-ranges: bytes
DNS

vjs.zencdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

vjs.zencdn.net

IN A

Response

vjs.zencdn.net

IN CNAME

dualstack.osff.map.fastly.net

dualstack.osff.map.fastly.net

IN A

151.101.2.217

dualstack.osff.map.fastly.net

IN A

151.101.66.217

dualstack.osff.map.fastly.net

IN A

151.101.130.217

dualstack.osff.map.fastly.net

IN A

151.101.194.217
GET

https://anonfiles.com/sw_anonfiles.js

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /sw_anonfiles.js HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 42262
Content-Encoding: gzip
GET

https://anonfiles.com/img/file/filetypes/ext/rar.png?1668603321

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/file/filetypes/ext/rar.png?1668603321 HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: image/png
Content-Length: 631
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 67
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/es.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/es.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 666
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3906
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/kr.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/kr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:24 GMT
Content-Type: image/png
Content-Length: 988
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4356
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/us.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/us.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4014
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/se.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/se.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 581
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4314
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/jp.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/jp.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:24 GMT
Content-Type: image/png
Content-Length: 599
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3370
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/fr.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/fr.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 536
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4001
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/dk.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/dk.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 537
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3402
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/de.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/de.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:22 GMT
Content-Type: image/png
Content-Length: 483
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4622
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/ru.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/ru.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 403
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4462
accept-ranges: bytes
GET

https://anonfiles.com/img/flags/24/fi.png

firefox.exe

Remote address:

45.154.253.150:443

Request

GET /img/flags/24/fi.png HTTP/1.1
Host: anonfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

Response

HTTP/1.1 200 OK

Server: nginx
Date: Tue, 31 Jan 2023 09:09:23 GMT
Content-Type: image/png
Content-Length: 456
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3922
accept-ranges: bytes
DNS

djv99sxoqpv11.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

djv99sxoqpv11.cloudfront.net

IN A

Response

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.9

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.120

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.22

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.144
DNS

dualstack.osff.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dualstack.osff.map.fastly.net

IN A

Response

dualstack.osff.map.fastly.net

IN A

151.101.2.217

dualstack.osff.map.fastly.net

IN A

151.101.66.217

dualstack.osff.map.fastly.net

IN A

151.101.130.217

dualstack.osff.map.fastly.net

IN A

151.101.194.217
DNS

djv99sxoqpv11.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

djv99sxoqpv11.cloudfront.net

IN A

Response

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.120

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.9

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.22

djv99sxoqpv11.cloudfront.net

IN A

108.156.61.144
DNS

dualstack.osff.map.fastly.net

firefox.exe

Remote address:

8.8.8.8:53

Request

dualstack.osff.map.fastly.net

IN AAAA

Response

dualstack.osff.map.fastly.net

IN AAAA

2a04:4e42::729

dualstack.osff.map.fastly.net

IN AAAA

2a04:4e42:200::729

dualstack.osff.map.fastly.net

IN AAAA

2a04:4e42:400::729

dualstack.osff.map.fastly.net

IN AAAA

2a04:4e42:600::729
GET

https://djv99sxoqpv11.cloudfront.net/?xsvjd=737329

firefox.exe

Remote address:

108.156.61.9:443

Request

GET /?xsvjd=737329 HTTP/2.0
host: djv99sxoqpv11.cloudfront.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 200

content-length: 68728
date: Tue, 31 Jan 2023 09:09:22 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 3bdef981159de9c713020c64476ba0e4.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: VC6EWIGRTIDws00STae66xgkTiPmj2t_3FW67BRmcmaSqBEQ2kqb4Q==
DNS

djv99sxoqpv11.cloudfront.net

firefox.exe

Remote address:

8.8.8.8:53

Request

djv99sxoqpv11.cloudfront.net

IN AAAA

Response
DNS

baconaces.pro

firefox.exe

Remote address:

8.8.8.8:53

Request

baconaces.pro

IN A

Response

baconaces.pro

IN A

54.162.51.18

baconaces.pro

IN A

52.20.131.174
DNS

baconaces.pro

firefox.exe

Remote address:

8.8.8.8:53

Request

baconaces.pro

IN A

Response

baconaces.pro

IN A

54.162.51.18

baconaces.pro

IN A

52.20.131.174
DNS

pogothere.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

pogothere.xyz

IN A

Response

pogothere.xyz

IN A

188.114.96.0

pogothere.xyz

IN A

188.114.97.0
DNS

baconaces.pro

firefox.exe

Remote address:

8.8.8.8:53

Request

baconaces.pro

IN AAAA

Response
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A
DNS

ldpiecesonth.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

ldpiecesonth.xyz

IN A

Response

ldpiecesonth.xyz

IN A

188.114.96.0

ldpiecesonth.xyz

IN A

188.114.97.0
DNS

accounts.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN A

Response

accounts.google.com

IN A

142.251.36.45
GET

https://pogothere.xyz/

firefox.exe

Remote address:

188.114.96.0:443

Request

GET / HTTP/2.0
host: pogothere.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
origin: https://anonfiles.com
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:23 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://anonfiles.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 244
last-modified: Tue, 31 Jan 2023 09:05:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fd34wcra%2B1n3TyJLROa8lbOB8DS7gCTK9OpJnFZW%2FYYGlfg8ikNAbtPGnxg1JH%2FK0659cc8yHJ6Gf%2FAM5q%2Bdrbt9fHFBN00ijh8rLmHVKlan%2FM1a6LGdmRrUaXF9N7Va"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214ee6ca1fb915-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://pogothere.xyz/asd100.bin

firefox.exe

Remote address:

188.114.96.0:443

Request

GET /asd100.bin HTTP/2.0
host: pogothere.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
origin: https://anonfiles.com
pragma: no-cache
cache-control: no-cache
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:23 GMT
content-type: text/plain
set-cookie: csu=2226021232231614@1@1675156163; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://anonfiles.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=46PmaJbi7i0hxYdLriTcNjzQxoRy5dGBsKBVtuzPbkDJkSW0%2BPgWacTA3p%2FWCBRkd%2BiL2PDq9HhysCsaQmCNBoUYWXomItCImdDqoa7l9wRMI4Mr55p8TvvsGENrsmdI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214ee6ba11b915-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

pogothere.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

pogothere.xyz

IN A

Response

pogothere.xyz

IN A

188.114.96.0

pogothere.xyz

IN A

188.114.97.0
GET

https://ldpiecesonth.xyz/OW94STAWUBs6DXYpMXx9bF8xE3EBKhwICVIsDw8VCy07DmFpLiB5Fk0GHHQHClhLewkfHxEtDQhJCz1RTRoLdAEfBhYvXwRJDnQBF1xMZwMIQUpvRQReXj1AWAhFeBZJGwwlDQhZT3wBDFZPfwEJWkk

firefox.exe

Remote address:

188.114.96.0:443

Request

GET /OW94STAWUBs6DXYpMXx9bF8xE3EBKhwICVIsDw8VCy07DmFpLiB5Fk0GHHQHClhLewkfHxEtDQhJCz1RTRoLdAEfBhYvXwRJDnQBF1xMZwMIQUpvRQReXj1AWAhFeBZJGwwlDQhZT3wBDFZPfwEJWkk HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:23 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2FJRhhm5ZEo9zb9RQMPGv1B0hcgDTolCuL%2BwGqyOTqVrxNcONgFb0wtrfcnGvovRNquDywm8idUX1GU9kUBzjqCJjdPh7U197KPSpSLm9QZiJ1hY5PlKwENA4fPf2GUW6isM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214ee669ddb986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://ldpiecesonth.xyz/a0NCWEZEfCErez8udw0XWSdwDysxchQQczIaGigTDnJ7PyI9AmQsLw9+dWtxWHByfjYCJ39pfk0wNjkyHjB/aWACLSQ3e001f2loW21wdnRNNn9pYB8zIz97WmUyLDIHfnNucV5yd2FxXXJyb3A

firefox.exe

Remote address:

188.114.96.0:443

Request

GET /a0NCWEZEfCErez8udw0XWSdwDysxchQQczIaGigTDnJ7PyI9AmQsLw9+dWtxWHByfjYCJ39pfk0wNjkyHjB/aWACLSQ3e001f2loW21wdnRNNn9pYB8zIz97WmUyLDIHfnNucV5yd2FxXXJyb3A HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:23 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDGXjbcrmy1ErpuooZ0RxcBg420PU4oS%2Baz6wB7cVU73d%2BWhKDTT4Bu%2Fo4FZE%2Bp%2F3EceOl7w3IjnM1JJhuWYIjl07%2BDgXVcuvFcOjmR7v9zF29Zj6GLI1aQPkmGorxEtkVZU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214ee6fa8ab986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://ldpiecesonth.xyz/popunder.gif

firefox.exe

Remote address:

188.114.96.0:443

Request

GET /popunder.gif HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:24 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 35949
last-modified: Mon, 30 Jan 2023 23:10:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4qD2ickG73PSn1q8gf1PDiHDGyav30ov7W%2B5r2dKpZQ2pn6sM5KPnFtgl0ZBQiQ2FI%2FUqs7e1%2BpFPb4Z1THiw0RCZhH5ld%2B5Bts7ZPHIZ16y%2BZbljNByYjCKz2e2vnvGJ6Pu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214eeaef37b986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/N0lEckwYdicBcVURIAAtYhsRJiB5LyAeHngeAjB8byIGEBl/PmIGJVN0c0F7BHt9VDxeLXlDakQ9JQY5RHR3VCVZLytPL1sgJxlqQXR1XH8DZ3dDYgVvMU99ET00EysKeGICOEMleUN6AHx1R3UAf3ZBfgE

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /N0lEckwYdicBcVURIAAtYhsRJiB5LyAeHngeAjB8byIGEBl/PmIGJVN0c0F7BHt9VDxeLXlDakQ9JQY5RHR3VCVZLytPL1sgJxlqQXR1XH8DZ3dDYgVvMU99ET00EysKeGICOEMleUN6AHx1R3UAf3ZBfgE HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:24 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gk7A2vV0Ci0ydUCSBpdbbExrvy2cxF18R1jsULuU0uOTCsdiNLSywLtBm2F8uSABW6bMhXNKGHtZ8XAW6icYbjvGSaV2GVdlq1BtVSHm3Xul%2BXiDXysU3m95YquYjk2N%2BLZs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214eed298eb986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/WU9xS212cBI4UA8bFRM0IwECDwBgGTAcGhYVNyQpAygzJTo+PFc/BD1yRnhaan1IbR0wK0x6Syo7ED8YKnJEbQQ3KR52Sy9yQGVebWFCekNraQR2XH87ASoKZH5XOxktI0x6W256QH5UbnlDeFpt

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /WU9xS212cBI4UA8bFRM0IwECDwBgGTAcGhYVNyQpAygzJTo+PFc/BD1yRnhaan1IbR0wK0x6Syo7ED8YKnJEbQQ3KR52Sy9yQGVebWFCekNraQR2XH87ASoKZH5XOxktI0x6W256QH5UbnlDeFpt HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:24 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kq%2BG6RmKJ5m2SubtsK8Erf4ngH6IaEkGS8wHGtiqxAv1vXaK8D0AkKduGTk2WIjoAh9E7bNhBTLL9sKJq74AX0OUKEA4%2By4jxcuOoK8UgCawQ9ugyQEh3J5ZKkDZAoJ%2BPayz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214eed79d8b986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/eldUeU9VaDcKci85EiEqFB0mKghDGgU+OzMNETcMIwIOFx5KOHINJh5qY0p4SWVtXz8TM2lIaQkjNQ06CWpnSX9IcT0XKRVqY1d2TWByD3JLeWdNYUlmektpD2pmS31MZ2ZIfUllZkp+TGZgXzsKNjNEflwnIA0jR2ZiTnpLYm1OeEpkYUg

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /eldUeU9VaDcKci85EiEqFB0mKghDGgU+OzMNETcMIwIOFx5KOHINJh5qY0p4SWVtXz8TM2lIaQkjNQ06CWpnSX9IcT0XKRVqY1d2TWByD3JLeWdNYUlmektpD2pmS31MZ2ZIfUllZkp+TGZgXzsKNjNEflwnIA0jR2ZiTnpLYm1OeEpkYUg HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:32 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZU23pNkKJ6B6rNV5KD%2F00Mluws2M670wib6jNzqgV%2B4uVU3%2FRwbW6qD9Gc1xpaoTiJTFcgElLlO6YAGx%2BoA6HSDfNWrPyet%2FWbO8lyjg%2FwsZPbXPKP1nZUBUrYlh1iu9BlO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f1f6ebab986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/aEFWWHVHfjUrSAwEBB0WAgMQOy0mBhcdRFEiPR0wORkQayQfFHAsHAx8YWtCW3NvfgUBJWtpUxs1NywAG3xlfhwGJzllFgQoNTNTHnxndkZcb2VpW1pnI2VHWnNgaEdZc2VqR1twYGlBTjUmORJVcHAoARwta2lDX3RnbUxfdmduRVA

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /aEFWWHVHfjUrSAwEBB0WAgMQOy0mBhcdRFEiPR0wORkQayQfFHAsHAx8YWtCW3NvfgUBJWtpUxs1NywAG3xlfhwGJzllFgQoNTNTHnxndkZcb2VpW1pnI2VHWnNgaEdZc2VqR1twYGlBTjUmORJVcHAoARwta2lDX3RnbUxfdmduRVA HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:34 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhKLOtY6EW9vQVgrfA%2BkSyG9yhZVGi8%2FRifP2KH3OuceAqnC75eYs%2FoXGuMV%2FuS4Ks9jOQZj4uDddZrj5mE6YrpA2Am%2BBWP5CURefROO1mypONZHx3LqUVLNFYJ902FGQhr2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f276934b986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/WU1OdXR2ci0GST0nGAEWNSEGNDIpLC8gTBQaf0QACDoMECxrOmgBHT1weUZDan93UwQwKXNEUio5LwEBKnB7Ux03KyFIUi9wf1tHbWN9RFpraztIRmt/eEVGaH99R0ZqfHhEQH85PhQTZHxoBQAtIXNEQm54f0BNbnp/Q0Fv

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /WU1OdXR2ci0GST0nGAEWNSEGNDIpLC8gTBQaf0QACDoMECxrOmgBHT1weUZDan93UwQwKXNEUio5LwEBKnB7Ux03KyFIUi9wf1tHbWN9RFpraztIRmt/eEVGaH99R0ZqfHhEQH85PhQTZHxoBQAtIXNEQm54f0BNbnp/Q0Fv HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:34 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LYwArj3snsdIfL0ueMJ2hTkspC3bdplyw7DINIEBBoVxq59f5qtEhNYo1340j%2BEQCiFtowTVCdnIQpDnOiAc1%2FewF8T617aNYEtZyV0AC%2Bliwq%2BFXkOePOKdmT6VOrLQ9CWx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f27793cb986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
POST

https://ldpiecesonth.xyz/dFhWVENbZzUnfhUABB0VHxIPBRtNMTU4ATo+OwJxLB0QYxlHO3AgKhBlYWd0R2pvcjMdPGtlZQcsNyA2B2VlZHNGfj86JRtlZ3p0RG1wIn5FdmVgbUdpeGZlAWVkZnFCaGRlcUdqZGdyQmlicjcEOTFpclIoIiAvSWlgY3ZFbW9jdEdrYGY

firefox.exe

Remote address:

188.114.96.0:443

Request

POST /dFhWVENbZzUnfhUABB0VHxIPBRtNMTU4ATo+OwJxLB0QYxlHO3AgKhBlYWd0R2pvcjMdPGtlZQcsNyA2B2VlZHNGfj86JRtlZ3p0RG1wIn5FdmVgbUdpeGZlAWVkZnFCaGRlcUdqZGdyQmlicjcEOTFpclIoIiAvSWlgY3ZFbW9jdEdrYGY HTTP/2.0
host: ldpiecesonth.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
content-length: 0
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:35 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i2diKJzMNcvPtWyhoMJeL%2FiAWCUhrpLEZ5x7JoYvzqm6k1oh8cGYlegBxqpRH7mcfVZv5WxIJeXM2E2bu%2BVBpDmBR6HwfKkJmZOU8w8N6zVpcOUtszv2ADVQwkjrgjgpB5uu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f321ea6b986-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

ldpiecesonth.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

ldpiecesonth.xyz

IN A

Response

ldpiecesonth.xyz

IN A

188.114.97.0

ldpiecesonth.xyz

IN A

188.114.96.0
GET

https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail

firefox.exe

Remote address:

142.251.36.45:443

Request

GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/2.0
host: accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
cookie: 1P_JAR=2023-01-31-09
cookie: NID=511=NY51xagIwwp_3grLBtxrJuS8TDVcmMaIEJXQvtf3kI5Frzu7V8bPPvpzCD3YVi34bGrTq0Al_5_7ejXPleqHnChfYRTZ8KMy94s7E94J1rD6teAcp3BsmoTLAQShVGDV0h63BwYSTBnKBkxsuR0H8xvvg6zngD1-BL73qLX05W0
cookie: ANID=AHWqTUl8R5ZX5bNJFeZEjF_3JSwDuTXUk5S4GJfTHo_42qQZBFX8PQDlP8ns8l3D
te: trailers
GET

https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube

firefox.exe

Remote address:

142.251.36.45:443

Request

GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/2.0
host: accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
cookie: 1P_JAR=2023-01-31-09
cookie: NID=511=NY51xagIwwp_3grLBtxrJuS8TDVcmMaIEJXQvtf3kI5Frzu7V8bPPvpzCD3YVi34bGrTq0Al_5_7ejXPleqHnChfYRTZ8KMy94s7E94J1rD6teAcp3BsmoTLAQShVGDV0h63BwYSTBnKBkxsuR0H8xvvg6zngD1-BL73qLX05W0
cookie: ANID=AHWqTUl8R5ZX5bNJFeZEjF_3JSwDuTXUk5S4GJfTHo_42qQZBFX8PQDlP8ns8l3D
te: trailers
GET

https://accounts.google.com/v3/signin/identifier?dsh=S-133631400%3A1675156163595872&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHdFri1v8XFcxDZQSlJwusBFDrVvta4n5MgDpKUtqICunAVg2Qn2Yt3_MOmTDNmSOgHPx9H_OQ

firefox.exe

Remote address:

142.251.36.45:443

Request

GET /v3/signin/identifier?dsh=S-133631400%3A1675156163595872&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHdFri1v8XFcxDZQSlJwusBFDrVvta4n5MgDpKUtqICunAVg2Qn2Yt3_MOmTDNmSOgHPx9H_OQ HTTP/2.0
host: accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
cookie: 1P_JAR=2023-01-31-09
cookie: NID=511=NY51xagIwwp_3grLBtxrJuS8TDVcmMaIEJXQvtf3kI5Frzu7V8bPPvpzCD3YVi34bGrTq0Al_5_7ejXPleqHnChfYRTZ8KMy94s7E94J1rD6teAcp3BsmoTLAQShVGDV0h63BwYSTBnKBkxsuR0H8xvvg6zngD1-BL73qLX05W0
cookie: ANID=AHWqTUl8R5ZX5bNJFeZEjF_3JSwDuTXUk5S4GJfTHo_42qQZBFX8PQDlP8ns8l3D
cookie: __Host-GAPS=1:3beiowRIv3_9c8w8pYCbG1dAVRy1NQ:qofYSV_rcqdYpOry
te: trailers
GET

https://accounts.google.com/v3/signin/identifier?dsh=S-536151771%3A1675156163609369&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHfUzqPxHd9dYWmGFrckF9c0lBRME_mNMVcUre7bUfAz5Hc75Yd91UL5IKQLlHi7wWUxglmq4w

firefox.exe

Remote address:

142.251.36.45:443

Request

GET /v3/signin/identifier?dsh=S-536151771%3A1675156163609369&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHfUzqPxHd9dYWmGFrckF9c0lBRME_mNMVcUre7bUfAz5Hc75Yd91UL5IKQLlHi7wWUxglmq4w HTTP/2.0
host: accounts.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
cookie: 1P_JAR=2023-01-31-09
cookie: NID=511=NY51xagIwwp_3grLBtxrJuS8TDVcmMaIEJXQvtf3kI5Frzu7V8bPPvpzCD3YVi34bGrTq0Al_5_7ejXPleqHnChfYRTZ8KMy94s7E94J1rD6teAcp3BsmoTLAQShVGDV0h63BwYSTBnKBkxsuR0H8xvvg6zngD1-BL73qLX05W0
cookie: ANID=AHWqTUl8R5ZX5bNJFeZEjF_3JSwDuTXUk5S4GJfTHo_42qQZBFX8PQDlP8ns8l3D
cookie: __Host-GAPS=1:kxSu5hXnUjW3oUwu9ti3QUXw9lk4Wg:q8dErD06VVR-vtae
te: trailers
DNS

accounts.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN A

Response

accounts.google.com

IN A

142.251.36.45
DNS

pogothere.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

pogothere.xyz

IN AAAA

Response
DNS

accounts.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN AAAA

Response

accounts.google.com

IN AAAA

2a00:1450:400e:810::200d
DNS

ldpiecesonth.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

ldpiecesonth.xyz

IN AAAA

Response
DNS

e1.o.lencr.org

firefox.exe

Remote address:

8.8.8.8:53

Request

e1.o.lencr.org

IN A

Response

e1.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

88.221.25.162

a1887.dscq.akamai.net

IN A

88.221.25.176
POST

http://ocsp.pki.goog/gts1c3

firefox.exe

Remote address:

142.251.36.35:80

Request

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:09:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://ocsp.pki.goog/s/gts1p5/_g6nn0scYZ8

firefox.exe

Remote address:

142.251.36.35:80

Request

POST /s/gts1p5/_g6nn0scYZ8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:09:35 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://ocsp.pki.goog/gts1c3

firefox.exe

Remote address:

142.251.36.35:80

Request

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:09:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://ocsp.pki.goog/gts1c3

firefox.exe

Remote address:

142.251.36.35:80

Request

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 09:09:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://e1.o.lencr.org/

firefox.exe

Remote address:

88.221.25.162:80

Request

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "71451582DEA531C1C761B00933D7DA6503DD4144A6FBBB93FD696653F127060E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5251
Expires: Tue, 31 Jan 2023 10:36:54 GMT
Date: Tue, 31 Jan 2023 09:09:23 GMT
Connection: keep-alive
POST

http://e1.o.lencr.org/

firefox.exe

Remote address:

88.221.25.162:80

Request

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "60BE9DA7E9A44BEE76F4BBFA26CA1BD442B99D64281F0268CD8946461E0B2E59"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3365
Expires: Tue, 31 Jan 2023 10:05:41 GMT
Date: Tue, 31 Jan 2023 09:09:36 GMT
Connection: keep-alive
POST

http://e1.o.lencr.org/

firefox.exe

Remote address:

88.221.25.162:80

Request

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "34D2D3358A6BFBF4B852523496A51CF88A3899F33C071DC4A4A3D420CACC0540"
Last-Modified: Sat, 28 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5808
Expires: Tue, 31 Jan 2023 10:46:24 GMT
Date: Tue, 31 Jan 2023 09:09:36 GMT
Connection: keep-alive
POST

http://e1.o.lencr.org/

firefox.exe

Remote address:

88.221.25.162:80

Request

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "71451582DEA531C1C761B00933D7DA6503DD4144A6FBBB93FD696653F127060E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5251
Expires: Tue, 31 Jan 2023 10:36:54 GMT
Date: Tue, 31 Jan 2023 09:09:23 GMT
Connection: keep-alive
DNS

thecoveos.com

firefox.exe

Remote address:

8.8.8.8:53

Request

thecoveos.com

IN A

Response

thecoveos.com

IN A

52.20.131.174

thecoveos.com

IN A

54.162.51.18
DNS

thecoveos.com

firefox.exe

Remote address:

8.8.8.8:53

Request

thecoveos.com

IN A

Response

thecoveos.com

IN A

52.20.131.174

thecoveos.com

IN A

54.162.51.18
DNS

thecoveos.com

firefox.exe

Remote address:

8.8.8.8:53

Request

thecoveos.com

IN AAAA

Response
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A

Response

osiextantly.com

IN A

52.222.139.45

osiextantly.com

IN A

52.222.139.10

osiextantly.com

IN A

52.222.139.30

osiextantly.com

IN A

52.222.139.83
GET

https://osiextantly.com/utx?cb=PV5m6ecMdsok&top=anonfiles.com&tid=737329

firefox.exe

Remote address:

52.222.139.45:443

Request

GET /utx?cb=PV5m6ecMdsok&top=anonfiles.com&tid=737329 HTTP/2.0
host: osiextantly.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:34 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://anonfiles.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 31 Jan 2023 09:10:34 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 12ab600b22d5c2eb1f2192b1156c2fd0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: Kf5hwY9TyslslGOkwRFm3gW03cMdSOizrgcRox9hDGFn0o8FrDF9Hg==
GET

https://osiextantly.com/?cs=RHBSRVB1RWVxYH1JZHZkcUVhdGU&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=8&u=2226021232231614&agec=1675156163&fs=1&mbkb=60.45949214026602&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_2dd8=1675159771614&utr1=00:00:01&utr2=25&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0

firefox.exe

Remote address:

52.222.139.45:443

Request

GET /?cs=RHBSRVB1RWVxYH1JZHZkcUVhdGU&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=8&u=2226021232231614&agec=1675156163&fs=1&mbkb=60.45949214026602&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_2dd8=1675159771614&utr1=00:00:01&utr2=25&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0 HTTP/2.0
host: osiextantly.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 302

content-type: text/plain
content-length: 0
location: https://teambee.website/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar
date: Tue, 31 Jan 2023 09:09:34 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=f6e69fd7-a740-4866-ac8c-d33d11d2ffc4
set-cookie: csu=2226021232231614
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 12ab600b22d5c2eb1f2192b1156c2fd0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: u_Qa8t69zAKO_gca1sLb2-NvRLyHnU6BmveU4irakz6zIl9I5PjDhw==
GET

https://osiextantly.com/?cs=c2pOc2RKU3ZFVkpTfUpUQF1%2BSlw&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=-1&fs=1&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_a4HI=1675159762335&utr1=00:00:01&utr2=6&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0

firefox.exe

Remote address:

52.222.139.45:443

Request

GET /?cs=c2pOc2RKU3ZFVkpTfUpUQF1%2BSlw&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=-1&fs=1&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_a4HI=1675159762335&utr1=00:00:01&utr2=6&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0 HTTP/2.0
host: osiextantly.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 204

date: Tue, 31 Jan 2023 09:09:35 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://anonfiles.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 31 Jan 2023 09:10:35 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 12ab600b22d5c2eb1f2192b1156c2fd0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: gxfQi4iGqaJxrTCnN0PxqNqx3bM0gArY0kjFI1dyLl_EJTMVk-0uoA==
GET

https://osiextantly.com/utx?tid=737323&top=anonfiles.com&cb=w4XvMJCRB3w7

firefox.exe

Remote address:

52.222.139.45:443

Request

GET /utx?tid=737323&top=anonfiles.com&cb=w4XvMJCRB3w7 HTTP/2.0
host: osiextantly.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://anonfiles.com
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
te: trailers

Response

HTTP/2.0 302

content-type: text/plain
content-length: 0
location: https://streamdeer.icu/wep2v4?o=235&s1=WW2&title=RDR2CHEAT.rar&click_id=496860125100656689&source=737329
date: Tue, 31 Jan 2023 09:09:35 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=1187218d-34c2-4d89-9866-557aff32ffc9
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 12ab600b22d5c2eb1f2192b1156c2fd0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: sU5XRRz9M5BfXnc2PKP7qsERik3TyFslcQMSgB5LEk-brfQhORO-Fw==
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN A

Response

osiextantly.com

IN A

52.222.139.45

osiextantly.com

IN A

52.222.139.10

osiextantly.com

IN A

52.222.139.30

osiextantly.com

IN A

52.222.139.83
DNS

osiextantly.com

firefox.exe

Remote address:

8.8.8.8:53

Request

osiextantly.com

IN AAAA

Response
DNS

teambee.website

firefox.exe

Remote address:

8.8.8.8:53

Request

teambee.website

IN A

Response

teambee.website

IN A

188.114.96.0

teambee.website

IN A

188.114.97.0
DNS

teambee.website

firefox.exe

Remote address:

8.8.8.8:53

Request

teambee.website

IN A

Response

teambee.website

IN A

188.114.97.0

teambee.website

IN A

188.114.96.0
GET

https://teambee.website/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar

firefox.exe

Remote address:

188.114.96.0:443

Request

GET /K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar HTTP/2.0
host: teambee.website
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 302

date: Tue, 31 Jan 2023 09:09:35 GMT
content-type: text/html; charset=UTF-8
location: https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl
x-powered-by: PHP/7.1.27
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bIctImoYR%2BirOrZRD0I1aOL6H6yRleQzrewDg%2BABuSkUQPVFK3Bcg%2BF%2BCVLq243Xp3mo141YZ00DK%2FMipcpJfs%2Fqgsf7Jajxq3NoSAQ%2B%2FmZJr83nEvqsujdHL2IHn80yPHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f2f4be2b894-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

teambee.website

firefox.exe

Remote address:

8.8.8.8:53

Request

teambee.website

IN AAAA

Response
DNS

streamdeer.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

streamdeer.icu

IN A

Response

streamdeer.icu

IN A

188.114.97.0

streamdeer.icu

IN A

188.114.96.0
DNS

streamdeer.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

streamdeer.icu

IN A

Response

streamdeer.icu

IN A

188.114.96.0

streamdeer.icu

IN A

188.114.97.0
GET

https://streamdeer.icu/wep2v4?o=235&s1=WW2&title=RDR2CHEAT.rar&click_id=496860125100656689&source=737329

firefox.exe

Remote address:

188.114.97.0:443

Request

GET /wep2v4?o=235&s1=WW2&title=RDR2CHEAT.rar&click_id=496860125100656689&source=737329 HTTP/2.0
host: streamdeer.icu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 302

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/html; charset=UTF-8
location: https://wastewire.xyz/71f6f05e57
x-powered-by: PHP/7.1.27
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tVOlcF2onP8izMaqM380qtiyzm8EeX9%2B8AC2NhdYzuiGq3vnG0LcxP0gyBSuJdOkXTty0uPDBev2a2zHuL2aYktFkn8eZN4r%2B3Em9p36iueh7WJZnRU8eu5DKEjQ%2BQGc3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f32982f1c7c-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

streamdeer.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

streamdeer.icu

IN AAAA

Response
DNS

suntrees.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

suntrees.icu

IN A

Response

suntrees.icu

IN A

172.67.173.24

suntrees.icu

IN A

104.21.63.235
GET

https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl

firefox.exe

Remote address:

172.67.173.24:443

Request

GET /K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl HTTP/2.0
host: suntrees.icu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.27
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FGuvRM%2F8p4XFQ6yTwFOU754wIefUazs8FT38A9RmRszbIroufef2xv5a86QFZ6KRB2H7z%2F9SsMtUZwZfDGviYUJfCTMGyJI1ZhocOWgQ8mLP0MnvqWD5Ru0gz4nBunE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f3259ccb746-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://suntrees.icu/images/generalbundle.css

firefox.exe

Remote address:

172.67.173.24:443

Request

GET /images/generalbundle.css HTTP/2.0
host: suntrees.icu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/css
last-modified: Mon, 10 Jan 2022 19:22:59 GMT
etag: W/"61dc8793-66b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1639
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0iF3ln3TGDlGejW5CgSsDjp9qgp0mr%2BF6fYCqT%2Fzmtc7AvjWgXxPAWVa3u%2FfIm6TzPO5q5zbL2bWVTdxHjVomWRXXzwmek0CYM0EkzlwgwkqjQbH6Y2J0e%2BpPmIonlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f34cc25b746-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://suntrees.icu/images/firefox/bundlehelp.css

firefox.exe

Remote address:

172.67.173.24:443

Request

GET /images/firefox/bundlehelp.css HTTP/2.0
host: suntrees.icu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/css
last-modified: Wed, 07 Oct 2020 11:38:48 GMT
etag: W/"5f7da8c8-876"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1639
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2FGfVb9Ljjpf8LhPjqhfnbocblGJ%2FQYOkSdssi7Tvtib21oIspQXE62UgG510GEarXBh3cNhnIJfCNv%2BmX%2BRgXwlsg0xUxmBjy5m%2BbDb4HIb%2FWmd%2B257m9idITdmzoI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f34cc26b746-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://suntrees.icu/favicon.ico

firefox.exe

Remote address:

172.67.173.24:443

Request

GET /favicon.ico HTTP/2.0
host: suntrees.icu
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
te: trailers

Response

HTTP/2.0 404

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VtJ%2FMkl1zN3nexfFG1qHz8fBIm0Gt%2FvtyZhjU%2F%2FppTdc%2FuliOd5hW7xjIm0S1%2Bu4Rg8qtExWyQ9DVJqvh0YlJNpKacoDPX9BCoufPcYO%2Bc83G5jeVp0Aq2dfVxBgh3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f37ffe0b746-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

suntrees.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

suntrees.icu

IN A

Response

suntrees.icu

IN A

104.21.63.235

suntrees.icu

IN A

172.67.173.24
DNS

suntrees.icu

firefox.exe

Remote address:

8.8.8.8:53

Request

suntrees.icu

IN AAAA

Response
DNS

wastewire.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

wastewire.xyz

IN A

Response

wastewire.xyz

IN A

188.114.97.0

wastewire.xyz

IN A

188.114.96.0
DNS

wastewire.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

wastewire.xyz

IN A

Response

wastewire.xyz

IN A

188.114.97.0

wastewire.xyz

IN A

188.114.96.0
DNS

code.jquery.com

firefox.exe

Remote address:

8.8.8.8:53

Request

code.jquery.com

IN A

Response

code.jquery.com

IN CNAME

cds.s5x3j6q5.hwcdn.net

cds.s5x3j6q5.hwcdn.net

IN A

69.16.175.42

cds.s5x3j6q5.hwcdn.net

IN A

69.16.175.10
GET

https://wastewire.xyz/71f6f05e57

firefox.exe

Remote address:

188.114.97.0:443

Request

GET /71f6f05e57 HTTP/2.0
host: wastewire.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar
upgrade-insecure-requests: 1
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.27
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7UB16tqB49y903Oq3jI%2Fm8QyE53evU%2BbKEI4hanGvJhW%2BL8EcEtDK6Y3Qg19mltHn8uMT7JG99ClrEt%2FGdz2HzvCbDdLePVOdaeUFWjZiDvGzAjUDLeAByA2tCpSsjk4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f35a8140c38-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://wastewire.xyz/images/generalbundle.css

firefox.exe

Remote address:

188.114.97.0:443

Request

GET /images/generalbundle.css HTTP/2.0
host: wastewire.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://wastewire.xyz/71f6f05e57
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:36 GMT
content-type: text/css
last-modified: Wed, 07 Oct 2020 11:38:48 GMT
etag: W/"5f7da8c8-876"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2013
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2FzC33tJcw69qvRJVna7PmAkwF8CjeIT705urXi5lrLweyzF8ZX%2BBK6JePiKEkZjJWtZV%2FiAAyqpVzajb%2BFgBk5nFNQzyVv%2FJwcxYxmtavqgalUJaRGiUZPMvcL%2B2eUh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f391bc60c38-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://wastewire.xyz/images/firefox/bundlehelp.css

firefox.exe

Remote address:

188.114.97.0:443

Request

GET /images/firefox/bundlehelp.css HTTP/2.0
host: wastewire.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://wastewire.xyz/71f6f05e57
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:37 GMT
content-type: text/css
last-modified: Mon, 10 Jan 2022 19:22:59 GMT
etag: W/"61dc8793-66b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ad6oKOWKc5Gezxi3Jxy2wC3ZyJRRYwYcEeVABgmOEH%2BY8wutnsCjijF%2FUc1s85ov2XiS%2BOqUcR2RxoStgV5W3E8jAetupjKsFgt9q0k4HIoXW138sHP6zJQXYGA3%2ByN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f391bbb0c38-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
GET

https://wastewire.xyz/favicon.ico

firefox.exe

Remote address:

188.114.97.0:443

Request

GET /favicon.ico HTTP/2.0
host: wastewire.xyz
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
te: trailers

Response

HTTP/2.0 404

date: Tue, 31 Jan 2023 09:09:37 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xAerCKwqQUpFLM%2F6KbVUi6NE3dSGOn3ASgNV7FHy4Z65PMgqCbU%2FJnKyAY%2BV6HtBdJ4kzKq0FAxf%2BDVM5nAE%2BKfM7HLI%2B8EJTJhYzBUrFTe3sHkHPY%2BJp7WG5hrCRprV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79214f3cf8480c38-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
DNS

nostop.go2cloud.org

firefox.exe

Remote address:

8.8.8.8:53

Request

nostop.go2cloud.org

IN A

Response

nostop.go2cloud.org

IN A

18.202.12.61

nostop.go2cloud.org

IN A

52.210.2.133

nostop.go2cloud.org

IN A

52.210.174.128
GET

https://code.jquery.com/jquery-3.1.0.min.js

firefox.exe

Remote address:

69.16.175.42:443

Request

GET /jquery-3.1.0.min.js HTTP/2.0
host: code.jquery.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl
te: trailers
DNS

cds.s5x3j6q5.hwcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cds.s5x3j6q5.hwcdn.net

IN A

Response

cds.s5x3j6q5.hwcdn.net

IN A

69.16.175.10

cds.s5x3j6q5.hwcdn.net

IN A

69.16.175.42
DNS

wastewire.xyz

firefox.exe

Remote address:

8.8.8.8:53

Request

wastewire.xyz

IN AAAA

Response
DNS

cds.s5x3j6q5.hwcdn.net

firefox.exe

Remote address:

8.8.8.8:53

Request

cds.s5x3j6q5.hwcdn.net

IN AAAA

Response

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:3b

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:2b

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:2a

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:1a

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:3a

cds.s5x3j6q5.hwcdn.net

IN AAAA

2001:4de0:ac18::1:a:1b
DNS

nostop.go2cloud.org

firefox.exe

Remote address:

8.8.8.8:53

Request

nostop.go2cloud.org

IN A

Response

nostop.go2cloud.org

IN A

52.210.174.128

nostop.go2cloud.org

IN A

52.210.2.133

nostop.go2cloud.org

IN A

18.202.12.61
DNS

nostop.go2cloud.org

firefox.exe

Remote address:

8.8.8.8:53

Request

nostop.go2cloud.org

IN AAAA

Response
DNS

nostop.go2cloud.org

firefox.exe

Remote address:

8.8.8.8:53

Request

nostop.go2cloud.org

IN AAAA

Response
DNS

yourjsdelivery.com

firefox.exe

Remote address:

8.8.8.8:53

Request

yourjsdelivery.com

IN A

Response

yourjsdelivery.com

IN A

172.67.74.130

yourjsdelivery.com

IN A

104.26.5.109

yourjsdelivery.com

IN A

104.26.4.109
DNS

ajax.googleapis.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ajax.googleapis.com

IN A

Response

ajax.googleapis.com

IN A

142.250.179.138
GET

https://ajax.googleapis.com/ajax/libs/jquery/1.12.0/jquery.min.js

firefox.exe

Remote address:

142.250.179.138:443

Request

GET /ajax/libs/jquery/1.12.0/jquery.min.js HTTP/2.0
host: ajax.googleapis.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://wastewire.xyz/71f6f05e57
te: trailers
DNS

ajax.googleapis.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ajax.googleapis.com

IN A

Response

ajax.googleapis.com

IN A

142.250.179.138
GET

https://yourjsdelivery.com/dl.min.js

firefox.exe

Remote address:

172.67.74.130:443

Request

GET /dl.min.js HTTP/2.0
host: yourjsdelivery.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://wastewire.xyz/71f6f05e57
te: trailers

Response

HTTP/2.0 200

date: Tue, 31 Jan 2023 09:09:37 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCMbXqwmdYWAZStAkCA%2BSg9%2F%2BzbF21d6SMiqLCb2ZgSOc91FkLIv3fWpMwGmQb0%2BIiT67Ei4zTvAzRzZNdB%2FohTkABtXBY3sJJgsAy4ds9QPROTXNkibeHM3xS380rGxsw0YaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79214f3a49a3b719-AMS
content-encoding: br
DNS

yourjsdelivery.com

firefox.exe

Remote address:

8.8.8.8:53

Request

yourjsdelivery.com

IN A

Response

yourjsdelivery.com

IN A

104.26.5.109

yourjsdelivery.com

IN A

104.26.4.109

yourjsdelivery.com

IN A

172.67.74.130
DNS

yourjsdelivery.com

firefox.exe

Remote address:

8.8.8.8:53

Request

yourjsdelivery.com

IN AAAA

Response
DNS

ajax.googleapis.com

firefox.exe

Remote address:

8.8.8.8:53

Request

ajax.googleapis.com

IN AAAA

Response

ajax.googleapis.com

IN AAAA

2a00:1450:400e:811::200a
DNS

support.mozilla.org

firefox.exe

Remote address:

8.8.8.8:53

Request

support.mozilla.org

IN A

Response

support.mozilla.org

IN CNAME

prod.sumo.mozit.cloud

prod.sumo.mozit.cloud

IN CNAME

prod.sumo.prod.webservices.mozgcp.net

prod.sumo.prod.webservices.mozgcp.net

IN A

34.149.128.2
DNS

prod.sumo.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.sumo.prod.webservices.mozgcp.net

IN A

Response

prod.sumo.prod.webservices.mozgcp.net

IN A

34.149.128.2
DNS

prod.sumo.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.sumo.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

cdn-115.anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-115.anonfiles.com

IN A

Response

cdn-115.anonfiles.com

IN A

195.96.151.67
DNS

cdn-115.anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-115.anonfiles.com

IN A

Response

cdn-115.anonfiles.com

IN A

195.96.151.67
DNS

cdn-115.anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-115.anonfiles.com

IN A

Response

cdn-115.anonfiles.com

IN A

195.96.151.67
DNS

cdn-115.anonfiles.com

firefox.exe

Remote address:

8.8.8.8:53

Request

cdn-115.anonfiles.com

IN AAAA

Response

cdn-115.anonfiles.com

IN AAAA

2a12:1e01:0:6::3
DNS

opengraph.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

opengraph.githubassets.com

IN A

Response

opengraph.githubassets.com

IN A

185.199.108.154

opengraph.githubassets.com

IN A

185.199.109.154

opengraph.githubassets.com

IN A

185.199.110.154

opengraph.githubassets.com

IN A

185.199.111.154
GET

https://opengraph.githubassets.com/e4bf404317878b2da9dea0ef881406b3ef7841d64edac2a2c5a540b020537c32/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

firefox.exe

Remote address:

185.199.108.154:443

Request

GET /e4bf404317878b2da9dea0ef881406b3ef7841d64edac2a2c5a540b020537c32/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More HTTP/2.0
host: opengraph.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
dnt: 1
upgrade-insecure-requests: 1
pragma: no-cache
cache-control: no-cache
te: trailers

Response

HTTP/2.0 200

x-ratelimit-limit: 100
x-ratelimit-remaining: 31
x-ratelimit-reset: 1675156583
access-control-allow-origin: *
content-security-policy: default-src 'none';style-src 'unsafe-inline';font-src https://github.github.com;img-src https://avatars.githubusercontent.com https://github.githubassets.com https://camo.githubusercontent.com
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=21600, immutable
content-type: image/png
etag: W/"23d4d-23tBjj1Y+bjB6tRY6l2Rg8yRdVQ"
x-github-backend: Kubernetes
x-github-request-id: 373E:0C4E:28D80:4C0BA1:63D8DADB
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 09:09:48 GMT
age: 0
x-served-by: cache-iad-kiad7000041-IAD, cache-ams21021-AMS
x-cache: MISS, MISS
x-cache-hits: 0, 0
strict-transport-security: max-age=31536000
x-fastly-request-id: 16d4d03eb8ebb9c92bead0de24ca67f517dcff79
content-length: 146765
DNS

opengraph.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

opengraph.githubassets.com

IN A

Response

opengraph.githubassets.com

IN A

185.199.108.154

opengraph.githubassets.com

IN A

185.199.109.154

opengraph.githubassets.com

IN A

185.199.110.154

opengraph.githubassets.com

IN A

185.199.111.154
DNS

opengraph.githubassets.com

firefox.exe

Remote address:

8.8.8.8:53

Request

opengraph.githubassets.com

IN AAAA

Response

89.22.234.180:40608

PrimeXLauncher.exe

1.3MB
26.2kB
982
474
20.42.65.89:443

322 B
7
93.184.221.240:80

322 B
7
35.241.9.150:443

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/records?collection=cfr-fxa&bucket=main

tls, http2

firefox.exe

2.0kB
7.3kB
16
16

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/records?collection=cfr-fxa&bucket=main
34.160.46.54:443

https://search.services.mozilla.com/1/firefox/75.0/release/en-US/IE/default/default/nov17-1

tls, http2

firefox.exe

1.7kB
6.4kB
15
17

HTTP Request

GET https://search.services.mozilla.com/1/firefox/75.0/release/en-US/IE/default/default/nov17-1
35.241.9.150:443

firefox.settings.services.mozilla.com

firefox.exe

98 B
52 B
2
1
34.217.182.232:443

shavar.services.mozilla.com

tls

firefox.exe

2.6kB
4.4kB
16
15
34.160.144.191:443

https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

tls, http2

firefox.exe

1.9kB
11.8kB
18
20

HTTP Request

GET https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
127.0.0.1:49795

firefox.exe
127.0.0.1:49798

firefox.exe
35.82.231.103:443

push.services.mozilla.com

tls

firefox.exe

1.7kB
3.8kB
9
8
65.9.86.119:443

https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json

tls, http

firefox.exe

2.2kB
14.5kB
19
24

HTTP Request

GET https://snippets.cdn.mozilla.net/6/Firefox/75.0/20200403170909/WINNT_x86_64-msvc/en-US/release/Windows_NT%2010.0/default/default/

HTTP Response

303

HTTP Request

GET https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json

HTTP Response

200
117.18.237.29:80

cs9.wac.phicdn.net

firefox.exe

190 B
92 B
4
2
127.0.0.1:49806

firefox.exe
216.58.208.110:443

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.3R2S2iMRC9o.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8-ukmJKpOYaCGRb909wNTowBRXFA/cb=gapi.loaded_0

tls, http2

firefox.exe

3.4kB
45.8kB
40
39

HTTP Request

GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.3R2S2iMRC9o.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8-ukmJKpOYaCGRb909wNTowBRXFA/cb=gapi.loaded_0
142.251.36.14:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

firefox.exe

2.4kB
9.0kB
14
17

HTTP Request

POST https://play.google.com/log?format=json&hasfast=true&authuser=0
142.251.36.14:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

firefox.exe

1.7kB
8.4kB
13
14

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0
172.217.168.226:443

https://googleads.g.doubleclick.net/adsid/google/si?gadsid=AORoGNTfcFc_IhlSrInQIGRovk6qMwBJEgAniy1Cf2yQ-ATLXA3EMnV-9w

tls, http2

firefox.exe

1.9kB
6.4kB
15
17

HTTP Request

GET https://googleads.g.doubleclick.net/adsid/google/ui?gadsid=AORoGNQXDHf0NXdM5gzdkISXc6T2txvIMeu0y7xqqykwW0zy0qx4KeT0QA

HTTP Request

GET https://googleads.g.doubleclick.net/adsid/google/si?gadsid=AORoGNTfcFc_IhlSrInQIGRovk6qMwBJEgAniy1Cf2yQ-ATLXA3EMnV-9w
20.207.73.82:443

https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb/rollup?direction=sw

tls, http2

firefox.exe

12.1kB
218.2kB
151
264

HTTP Request

GET https://github.com/remax3r

HTTP Response

200

HTTP Request

GET https://github.com/fluidicon.png

HTTP Response

200

HTTP Request

GET https://github.com/remax3r?tab=repositories

HTTP Response

200

HTTP Request

GET https://github.com/remax3r/Mars-Stealer-Version-8.2/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/CSGO-PRIVATE-SKINCHANGER/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Crimson-Dota-2-Cheat-Free-DotaPlus-Skills-ESP-Camera-Distance/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/RobuX-Generator-Made-By-NV3/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/OVERWATCH-PRIVATE-CHEAT-AIMBOT-ESP-TRIGGERBOT/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Free-Cheat-Crossfire-PH-Orpa-ESP-Aimbot-FastBullet-Zombie/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Rise-6.0-Client-Minecraft-Cheat-Cracked-Free/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Team-Fortress-2-Hack-Aimbot-Visuals-Hvh/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Phasmophobia-Cheat-ESP-Ghost-Appear-Infinite-Stamina/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/UNIVERSAL-HWID-SPOOFER-UPDATED-30.01.2023/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/BloxFlip-Towers-Predictor/graphs/participation?h=28&type=sparkline&w=155

HTTP Request

GET https://github.com/remax3r/Fortnite-RagDoll-V2-PrivCheat-Including-SoftAim-ESP-WALLHACK-TRIGGERBOT-AND-MORE/graphs/participation?h=28&type=sparkline&w=155

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

HTTP Response

200

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

HTTP Response

200

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/security/overall-count

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/spoofed_commit_check/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/overview_actions/main

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/tree-commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/hovercards/citation/sidebar_partial?tree_name=main

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/used_by_list

HTTP Response

200

HTTP Response

200

HTTP Response

204

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.com/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More/commit/5b42082ff1f72a441e5d885a9a9a8cf8e0604aeb/rollup?direction=sw

HTTP Response

200
117.18.237.29:80

http://ocsp.digicert.com/

http

firefox.exe

1.7kB
2.7kB
12
11

HTTP Request

POST http://ocsp.digicert.com/

HTTP Response

200

HTTP Request

POST http://ocsp.digicert.com/

HTTP Response

200

HTTP Request

POST http://ocsp.digicert.com/

HTTP Response

200
117.18.237.29:80

http://ocsp.digicert.com/

http

firefox.exe

795 B
1.0kB
9
8

HTTP Request

POST http://ocsp.digicert.com/

HTTP Response

200
185.199.108.154:443

https://github.githubassets.com/assets/chunk-app_components_files_readme-toc-element_ts-c9fa70297b98.js

tls, http2

firefox.exe

23.0kB
718.3kB
338
599

HTTP Request

GET https://github.githubassets.com/assets/light-719f1193e0c0.css

HTTP Request

GET https://github.githubassets.com/assets/wp-runtime-683e86ceec09.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-297da6-aaa32681a0b3.js

HTTP Request

GET https://github.githubassets.com/assets/environment-3424f91b6daa.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-58d8ed1c5cb7.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_details-dialog-elemen-63debe-4a2f37f7419e.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-6afc16-fa4f01d20b81.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_clipboard-copy-element_dist_index_esm_js-node_modules_github_mark-f079ea-692b8e7bcdfd.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_text-ex-3415a8-72e8230400a2.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b4f804-93a75d194dbb.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_view-components_app_components_primer_primer_js-node_modules_gith-6a1af4-0b90cf4b5716.js

HTTP Request

GET https://github.githubassets.com/assets/github-elements-6e3a1be1032e.js

HTTP Request

GET https://github.githubassets.com/assets/element-registry-1fbf1b303705.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-e954e8c01c93.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_manuelpuyol_turbo_dist_turbo_es2017-esm_js-ac3bd901e26b.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_alive-client_dist-bf5aa2-24c0cfc509a8.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_hotkey_dist_index_js-node_modules_github_hydro-analytics-client_d-047034-4198c9d47011.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_github_template-parts_lib_-273494-9dca884d6b8e.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-node_modules_github_quote-select-c15b39-7d4cbe4ffc8c.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-be84ec1f2e05.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-f0d967a97d48.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_socket-channel_ts-5da1f39e59d1.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_keyboard-shortcuts-helper_ts-app_assets_modules_github_be-d820ce-0682979ffa29.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_user-content_ts-app_assets_modules_github_blob-anchor_ts--b39cba-0e34333f0071.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-9df1e61e03a4.js

HTTP Request

GET https://github.githubassets.com/assets/behaviors-9ac7bdc48fd2.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-596c6d852b03.js

HTTP Request

GET https://github.githubassets.com/assets/notifications-global-e6860013c1f3.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-aa2ce822bc0d.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_primer_behaviors_dist_esm_-b34105-fabcc73c45cb.js

HTTP Request

GET https://github.githubassets.com/assets/profile-fe4786681e38.js

HTTP Request

GET https://github.githubassets.com/assets/sessions-e80dc136a7ec.js

HTTP Request

GET https://github.githubassets.com/assets/dark-0c343b529849.css

HTTP Request

GET https://github.githubassets.com/assets/primer-3e0c23f0f191.css

HTTP Request

GET https://github.githubassets.com/assets/github-2bd0741c348f.css

HTTP Request

GET https://github.githubassets.com/assets/global-c309e0470d2c.css

HTTP Request

GET https://github.githubassets.com/assets/profile-085697a49485.css

HTTP Request

GET https://github.githubassets.com/images/modules/profile/achievements/starstruck-default.png

HTTP Request

GET https://github.githubassets.com/images/modules/profile/profile-first-repo.svg

HTTP Request

GET https://github.githubassets.com/images/modules/profile/profile-joined-github.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-8d9d1aec570e.js

HTTP Request

GET https://github.githubassets.com/assets/chunk-app_components_profiles_contribution-graph-celebration-element_ts-cedd4dbe8ba7.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/favicons/favicon.svg

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/light-719f1193e0c0.css

HTTP Request

GET https://github.githubassets.com/assets/dark-0c343b529849.css

HTTP Request

GET https://github.githubassets.com/assets/primer-3e0c23f0f191.css

HTTP Request

GET https://github.githubassets.com/assets/code-85d351263652.css

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_optimizely_optimizely-sdk_dist_optimizely_browser_es_min_js-node_modules-77839b-e6c57f82d6e7.js

HTTP Request

GET https://github.githubassets.com/assets/optimizely-564b43d06308.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_memoize_dist_esm_index_-ced8cc-ffd5e4d6ee17.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-70450e-bdbaf1c3071b.js

HTTP Request

GET https://github.githubassets.com/assets/app_assets_modules_github_ref-selector_ts-b6515c7907be.js

HTTP Request

GET https://github.githubassets.com/assets/codespaces-2773ab1f4803.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_mini-throt-a33094-133bfae4158f.js

HTTP Request

GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_mini-th-85225b-d5c5eb0b8bb2.js

HTTP Request

GET https://github.githubassets.com/assets/repositories-1742d6251559.js

HTTP Request

GET https://github.githubassets.com/assets/topic-suggestions-a1ce486d7931.js

HTTP Request

GET https://github.githubassets.com/assets/code-menu-a2afa0bcf33d.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://github.githubassets.com/assets/chunk-app_components_files_readme-toc-element_ts-c9fa70297b98.js

HTTP Response

200
185.199.108.154:443

github.githubassets.com

tls, http2

firefox.exe

1.4kB
4.8kB
14
13
185.199.108.154:443

github.githubassets.com

tls, http2

firefox.exe

1.3kB
4.7kB
11
12
185.199.108.154:443

github.githubassets.com

tls, http2

firefox.exe

1.4kB
4.8kB
14
13
185.199.108.154:443

github.githubassets.com

tls, http2

firefox.exe

1.4kB
4.8kB
14
13
185.199.108.154:443

github.githubassets.com

tls, http2

firefox.exe

1.3kB
4.7kB
11
12
185.199.111.133:443

https://avatars.githubusercontent.com/u/123869172?s=48&v=4

tls, http2

firefox.exe

65.5kB
3.1MB
1340
2238

HTTP Request

GET https://avatars.githubusercontent.com/u/123869172?s=64&v=4

HTTP Request

GET https://avatars.githubusercontent.com/u/123869172?v=4

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://user-images.githubusercontent.com/116565324/197624764-11e668d9-6737-462a-a547-4f70ba622869.png

HTTP Request

GET https://avatars.githubusercontent.com/u/123869172?s=48&v=4

HTTP Response

200

HTTP Response

200
185.199.111.133:443

avatars.githubusercontent.com

tls, http2

firefox.exe

1.4kB
4.9kB
14
13
140.82.114.22:443

https://collector.github.com/github/collect

tls, http2

firefox.exe

4.8kB
6.2kB
18
18

HTTP Request

POST https://collector.github.com/github/collect

HTTP Response

204

HTTP Request

POST https://collector.github.com/github/collect

HTTP Response

204

HTTP Request

POST https://collector.github.com/github/collect

HTTP Response

204
20.207.73.85:443

https://api.github.com/_private/browser/stats

tls, http2

firefox.exe

81.2kB
9.0kB
81
44

HTTP Request

POST https://api.github.com/_private/browser/stats

HTTP Response

200

HTTP Request

POST https://api.github.com/_private/browser/stats

HTTP Response

200

HTTP Request

POST https://api.github.com/_private/browser/stats

HTTP Response

200

HTTP Request

POST https://api.github.com/_private/browser/stats

HTTP Response

200
185.199.111.133:443

user-images.githubusercontent.com

tls, http2

firefox.exe

1.4kB
4.9kB
14
13
45.154.253.150:443

https://anonfiles.com/img/flags/24/in.png

tls, http

firefox.exe

3.7kB
55.6kB
34
55

HTTP Request

GET https://anonfiles.com/p9W4ofU9y7/RDR2CHEAT_rar

HTTP Response

200

HTTP Request

GET https://anonfiles.com/css/anonfiles.css?1668606177

HTTP Response

200

HTTP Request

GET https://anonfiles.com/static/logo.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/in.png

HTTP Response

200
45.154.253.150:443

https://anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668603321

tls, http

firefox.exe

4.7kB
82.0kB
42
75

HTTP Request

GET https://anonfiles.com/js/app.js?1668606177

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/br.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/no.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/pl.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/sw_anonfiles.js?T0d5RGQUZU53U3x1SmZIbWVVZlIsJUgiXH8jVCVUfXBUcAZ%2EI1R9UXd%2BVHFceCNMfV1%2Ecx0iXW1rW3FWKyNNcVR8ak8iUylqTSYFd2pBJ1AsakFyVHhzHXNXeyNOIkZjZQozRmNlDSwBLCgPIQs8aRorCW1rW3VUYXJbaAIuKwohSCkmFTcBYyEYKBcqGg

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668603321

HTTP Response

200
45.154.253.150:443

https://anonfiles.com/img/flags/24/kr.png

tls, http

firefox.exe

2.8kB
20.4kB
19
27

HTTP Request

GET https://anonfiles.com/sw_anonfiles.js

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/file/filetypes/ext/rar.png?1668603321

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/es.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/kr.png

HTTP Response

200
45.154.253.150:443

https://anonfiles.com/img/flags/24/jp.png

tls, http

firefox.exe

2.2kB
3.5kB
12
15

HTTP Request

GET https://anonfiles.com/img/flags/24/us.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/se.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/jp.png

HTTP Response

200
45.154.253.150:443

https://anonfiles.com/img/flags/24/dk.png

tls, http

firefox.exe

1.8kB
2.4kB
11
13

HTTP Request

GET https://anonfiles.com/img/flags/24/fr.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/dk.png

HTTP Response

200
45.154.253.150:443

https://anonfiles.com/img/flags/24/fi.png

tls, http

firefox.exe

2.2kB
3.0kB
12
15

HTTP Request

GET https://anonfiles.com/img/flags/24/de.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/ru.png

HTTP Response

200

HTTP Request

GET https://anonfiles.com/img/flags/24/fi.png

HTTP Response

200
151.101.2.217:443

vjs.zencdn.net

tls

firefox.exe

4.1kB
153.0kB
65
120
151.101.2.217:443

vjs.zencdn.net

tls

firefox.exe

1.3kB
5.5kB
11
11
108.156.61.9:443

https://djv99sxoqpv11.cloudfront.net/?xsvjd=737329

tls, http2

firefox.exe

2.7kB
78.5kB
37
67

HTTP Request

GET https://djv99sxoqpv11.cloudfront.net/?xsvjd=737329

HTTP Response

200
54.162.51.18:443

baconaces.pro

tls

firefox.exe

2.5kB
30.3kB
30
37
188.114.96.0:443

pogothere.xyz

tls, http2

firefox.exe

1.3kB
5.4kB
11
9
188.114.96.0:443

https://pogothere.xyz/asd100.bin

tls, http2

firefox.exe

4.2kB
113.4kB
67
91

HTTP Request

GET https://pogothere.xyz/

HTTP Request

GET https://pogothere.xyz/asd100.bin

HTTP Response

200

HTTP Response

200
188.114.96.0:443

https://ldpiecesonth.xyz/dFhWVENbZzUnfhUABB0VHxIPBRtNMTU4ATo+OwJxLB0QYxlHO3AgKhBlYWd0R2pvcjMdPGtlZQcsNyA2B2VlZHNGfj86JRtlZ3p0RG1wIn5FdmVgbUdpeGZlAWVkZnFCaGRlcUdqZGdyQmlicjcEOTFpclIoIiAvSWlgY3ZFbW9jdEdrYGY

tls, http2

firefox.exe

4.2kB
9.1kB
33
25

HTTP Request

GET https://ldpiecesonth.xyz/OW94STAWUBs6DXYpMXx9bF8xE3EBKhwICVIsDw8VCy07DmFpLiB5Fk0GHHQHClhLewkfHxEtDQhJCz1RTRoLdAEfBhYvXwRJDnQBF1xMZwMIQUpvRQReXj1AWAhFeBZJGwwlDQhZT3wBDFZPfwEJWkk

HTTP Request

GET https://ldpiecesonth.xyz/a0NCWEZEfCErez8udw0XWSdwDysxchQQczIaGigTDnJ7PyI9AmQsLw9+dWtxWHByfjYCJ39pfk0wNjkyHjB/aWACLSQ3e001f2loW21wdnRNNn9pYB8zIz97WmUyLDIHfnNucV5yd2FxXXJyb3A

HTTP Response

204

HTTP Response

204

HTTP Request

GET https://ldpiecesonth.xyz/popunder.gif

HTTP Response

200

HTTP Request

POST https://ldpiecesonth.xyz/N0lEckwYdicBcVURIAAtYhsRJiB5LyAeHngeAjB8byIGEBl/PmIGJVN0c0F7BHt9VDxeLXlDakQ9JQY5RHR3VCVZLytPL1sgJxlqQXR1XH8DZ3dDYgVvMU99ET00EysKeGICOEMleUN6AHx1R3UAf3ZBfgE

HTTP Request

POST https://ldpiecesonth.xyz/WU9xS212cBI4UA8bFRM0IwECDwBgGTAcGhYVNyQpAygzJTo+PFc/BD1yRnhaan1IbR0wK0x6Syo7ED8YKnJEbQQ3KR52Sy9yQGVebWFCekNraQR2XH87ASoKZH5XOxktI0x6W256QH5UbnlDeFpt

HTTP Response

204

HTTP Response

204

HTTP Request

POST https://ldpiecesonth.xyz/eldUeU9VaDcKci85EiEqFB0mKghDGgU+OzMNETcMIwIOFx5KOHINJh5qY0p4SWVtXz8TM2lIaQkjNQ06CWpnSX9IcT0XKRVqY1d2TWByD3JLeWdNYUlmektpD2pmS31MZ2ZIfUllZkp+TGZgXzsKNjNEflwnIA0jR2ZiTnpLYm1OeEpkYUg

HTTP Response

204

HTTP Request

POST https://ldpiecesonth.xyz/aEFWWHVHfjUrSAwEBB0WAgMQOy0mBhcdRFEiPR0wORkQayQfFHAsHAx8YWtCW3NvfgUBJWtpUxs1NywAG3xlfhwGJzllFgQoNTNTHnxndkZcb2VpW1pnI2VHWnNgaEdZc2VqR1twYGlBTjUmORJVcHAoARwta2lDX3RnbUxfdmduRVA

HTTP Request

POST https://ldpiecesonth.xyz/WU1OdXR2ci0GST0nGAEWNSEGNDIpLC8gTBQaf0QACDoMECxrOmgBHT1weUZDan93UwQwKXNEUio5LwEBKnB7Ux03KyFIUi9wf1tHbWN9RFpraztIRmt/eEVGaH99R0ZqfHhEQH85PhQTZHxoBQAtIXNEQm54f0BNbnp/Q0Fv

HTTP Response

204

HTTP Response

204

HTTP Request

POST https://ldpiecesonth.xyz/dFhWVENbZzUnfhUABB0VHxIPBRtNMTU4ATo+OwJxLB0QYxlHO3AgKhBlYWd0R2pvcjMdPGtlZQcsNyA2B2VlZHNGfj86JRtlZ3p0RG1wIn5FdmVgbUdpeGZlAWVkZnFCaGRlcUdqZGdyQmlicjcEOTFpclIoIiAvSWlgY3ZFbW9jdEdrYGY

HTTP Response

204
188.114.96.0:443

ldpiecesonth.xyz

tls, http2

firefox.exe

1.2kB
5.6kB
9
8
142.251.36.45:443

https://accounts.google.com/v3/signin/identifier?dsh=S-536151771%3A1675156163609369&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHfUzqPxHd9dYWmGFrckF9c0lBRME_mNMVcUre7bUfAz5Hc75Yd91UL5IKQLlHi7wWUxglmq4w

tls, http2

firefox.exe

5.7kB
164.0kB
76
134

HTTP Request

GET https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail

HTTP Request

GET https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube

HTTP Request

GET https://accounts.google.com/v3/signin/identifier?dsh=S-133631400%3A1675156163595872&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHdFri1v8XFcxDZQSlJwusBFDrVvta4n5MgDpKUtqICunAVg2Qn2Yt3_MOmTDNmSOgHPx9H_OQ

HTTP Request

GET https://accounts.google.com/v3/signin/identifier?dsh=S-536151771%3A1675156163609369&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHfUzqPxHd9dYWmGFrckF9c0lBRME_mNMVcUre7bUfAz5Hc75Yd91UL5IKQLlHi7wWUxglmq4w
142.251.36.45:443

accounts.google.com

tls, http2

firefox.exe

1.3kB
5.3kB
11
9
142.251.36.35:80

http://ocsp.pki.goog/gts1c3

http

firefox.exe

1.6kB
2.5kB
10
8

HTTP Request

POST http://ocsp.pki.goog/gts1c3

HTTP Response

200

HTTP Request

POST http://ocsp.pki.goog/s/gts1p5/_g6nn0scYZ8

HTTP Response

200

HTTP Request

POST http://ocsp.pki.goog/gts1c3

HTTP Response

200
142.251.36.35:80

http://ocsp.pki.goog/gts1c3

http

firefox.exe

659 B
937 B
6
5

HTTP Request

POST http://ocsp.pki.goog/gts1c3

HTTP Response

200
88.221.25.162:80

http://e1.o.lencr.org/

http

firefox.exe

1.6kB
2.6kB
10
9

HTTP Request

POST http://e1.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://e1.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://e1.o.lencr.org/

HTTP Response

200
88.221.25.162:80

http://e1.o.lencr.org/

http

firefox.exe

656 B
965 B
6
5

HTTP Request

POST http://e1.o.lencr.org/

HTTP Response

200
52.20.131.174:443

thecoveos.com

tls

firefox.exe

4.3kB
6.5kB
27
28
52.20.131.174:443

thecoveos.com

tls

firefox.exe

2.4kB
20.1kB
21
31
157.240.247.35:443

www.facebook.com

tls

firefox.exe

2.0kB
33.6kB
22
32
52.222.139.45:443

https://osiextantly.com/utx?tid=737323&top=anonfiles.com&cb=w4XvMJCRB3w7

tls, http2

firefox.exe

2.9kB
9.2kB
16
21

HTTP Request

GET https://osiextantly.com/utx?cb=PV5m6ecMdsok&top=anonfiles.com&tid=737329

HTTP Request

GET https://osiextantly.com/?cs=RHBSRVB1RWVxYH1JZHZkcUVhdGU&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=8&u=2226021232231614&agec=1675156163&fs=1&mbkb=60.45949214026602&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_2dd8=1675159771614&utr1=00:00:01&utr2=25&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0

HTTP Response

204

HTTP Request

GET https://osiextantly.com/?cs=c2pOc2RKU3ZFVkpTfUpUQF1%2BSlw&abt=0&red=1&sm=16&k=&v=1.34.31.2&sts=0&prn=0&emb=0&tid=737329&rxy=1280_720&inc=-1&fs=1&file=RDR2CHEAT.rar&ref=https%3A%2F%2Fanonfiles.com%2Fp9W4ofU9y7%2FRDR2CHEAT_rar&osr=github.com&dstl=https%3A%2F%2Fcdn-115.anonfiles.com%2Fp9W4ofU9y7%2Fe31abde8-1675156762%2FRDR2CHEAT.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A75.0)%20gecko%2F20100101%20firefox%2F75.0&tzd=0&uloc=&if=0&ct=1&ctc=4&_a4HI=1675159762335&utr1=00:00:01&utr2=6&utr3=1&utr4=0&utr5=1&utr6=0&utr7=0

HTTP Response

302

HTTP Request

GET https://osiextantly.com/utx?tid=737323&top=anonfiles.com&cb=w4XvMJCRB3w7

HTTP Response

204

HTTP Response

302
52.222.139.45:443

osiextantly.com

tls, http2

firefox.exe

1.4kB
6.8kB
13
14
52.222.139.45:443

osiextantly.com

tls, http2

firefox.exe

1.4kB
6.8kB
13
14
52.222.139.45:443

osiextantly.com

tls, http2

firefox.exe

1.4kB
6.8kB
13
14
188.114.96.0:443

https://teambee.website/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar

tls, http2

firefox.exe

1.6kB
6.3kB
11
10

HTTP Request

GET https://teambee.website/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar

HTTP Response

302
188.114.97.0:443

https://streamdeer.icu/wep2v4?o=235&s1=WW2&title=RDR2CHEAT.rar&click_id=496860125100656689&source=737329

tls, http2

firefox.exe

1.6kB
6.2kB
11
10

HTTP Request

GET https://streamdeer.icu/wep2v4?o=235&s1=WW2&title=RDR2CHEAT.rar&click_id=496860125100656689&source=737329

HTTP Response

302
172.67.173.24:443

https://suntrees.icu/favicon.ico

tls, http2

firefox.exe

2.4kB
11.4kB
19
24

HTTP Request

GET https://suntrees.icu/K83GJKDOIEMGFNOO63PPODM3BDF1?t=download_vlc&s1=CL&click_id=3103751388469684809&source=737329&title=RDR2CHEAT.rar&o=338&redir=dGVhbWJlZS53ZWJzaXRl

HTTP Response

200

HTTP Request

GET https://suntrees.icu/images/generalbundle.css

HTTP Request

GET https://suntrees.icu/images/firefox/bundlehelp.css

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://suntrees.icu/favicon.ico

HTTP Response

404
188.114.97.0:443

https://wastewire.xyz/favicon.ico

tls, http2

firefox.exe

2.2kB
13.0kB
19
26

HTTP Request

GET https://wastewire.xyz/71f6f05e57

HTTP Response

200

HTTP Request

GET https://wastewire.xyz/images/generalbundle.css

HTTP Request

GET https://wastewire.xyz/images/firefox/bundlehelp.css

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://wastewire.xyz/favicon.ico

HTTP Response

404
69.16.175.42:443

https://code.jquery.com/jquery-3.1.0.min.js

tls, http2

firefox.exe

2.7kB
44.5kB
35
44

HTTP Request

GET https://code.jquery.com/jquery-3.1.0.min.js
18.202.12.61:443

nostop.go2cloud.org

tls

firefox.exe

2.5kB
7.2kB
14
16
142.250.179.138:443

https://ajax.googleapis.com/ajax/libs/jquery/1.12.0/jquery.min.js

tls, http2

firefox.exe

3.1kB
42.1kB
37
37

HTTP Request

GET https://ajax.googleapis.com/ajax/libs/jquery/1.12.0/jquery.min.js
172.67.74.130:443

https://yourjsdelivery.com/dl.min.js

tls, http2

firefox.exe

1.7kB
13.2kB
16
20

HTTP Request

GET https://yourjsdelivery.com/dl.min.js

HTTP Response

200
195.96.151.67:443

cdn-115.anonfiles.com

tls

firefox.exe

163.5kB
9.5MB
3530
7032
185.199.108.154:443

https://opengraph.githubassets.com/e4bf404317878b2da9dea0ef881406b3ef7841d64edac2a2c5a540b020537c32/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

tls, http2

firefox.exe

4.1kB
157.2kB
65
122

HTTP Request

GET https://opengraph.githubassets.com/e4bf404317878b2da9dea0ef881406b3ef7841d64edac2a2c5a540b020537c32/remax3r/Red-Dead-Redemption-2-Cheat-RDR-2-Hack-GodMode-ESP-More

HTTP Response

200

8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
99 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

35.241.9.150
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
99 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

35.241.9.150
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
167 B
1
1

DNS Request

firefox.settings.services.mozilla.com
8.8.8.8:53

search.services.mozilla.com

dns

firefox.exe

73 B
116 B
1
1

DNS Request

search.services.mozilla.com

DNS Response

34.160.46.54
8.8.8.8:53

a1887.dscq.akamai.net

dns

firefox.exe

67 B
99 B
1
1

DNS Request

a1887.dscq.akamai.net

DNS Response

88.221.25.176

88.221.25.162
8.8.8.8:53

search.r53-2.services.mozilla.com

dns

firefox.exe

79 B
95 B
1
1

DNS Request

search.r53-2.services.mozilla.com

DNS Response

34.160.46.54
8.8.8.8:53

search.r53-2.services.mozilla.com

dns

firefox.exe

79 B
161 B
1
1

DNS Request

search.r53-2.services.mozilla.com
8.8.8.8:53

a1887.dscq.akamai.net

dns

firefox.exe

67 B
123 B
1
1

DNS Request

a1887.dscq.akamai.net

DNS Response

2a02:26f0:b200::1748:fc9b

2a02:26f0:b200::1748:fc93
8.8.8.8:53

push.services.mozilla.com

dns

firefox.exe

71 B
237 B
1
1

DNS Request

push.services.mozilla.com

DNS Response

35.82.231.103

34.213.61.61

52.39.218.209

52.10.184.136

54.148.75.183

34.209.122.114

54.187.189.114

35.160.240.54
8.8.8.8:53

shavar.services.mozilla.com

dns

firefox.exe

73 B
205 B
1
1

DNS Request

shavar.services.mozilla.com

DNS Response

34.217.182.232

52.35.56.228

34.218.12.40

44.236.61.188

35.82.174.126

44.234.248.225
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
164 B
1
1

DNS Request

shavar.prod.mozaws.net

DNS Response

44.234.248.225

34.217.182.232

35.82.174.126

52.35.56.228

34.218.12.40

44.236.61.188
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
198 B
1
1

DNS Request

autopush.prod.mozaws.net

DNS Response

52.10.3.114

35.83.200.106

44.227.59.33

34.216.206.159

54.214.111.16

34.210.191.84

52.41.156.90

54.149.93.186
8.8.8.8:53

content-signature-2.cdn.mozilla.net

dns

firefox.exe

81 B
235 B
1
1

DNS Request

content-signature-2.cdn.mozilla.net

DNS Response

34.160.144.191
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
155 B
1
1

DNS Request

autopush.prod.mozaws.net
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
153 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
119 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

34.160.144.191
8.8.8.8:53

snippets.cdn.mozilla.net

dns

firefox.exe

70 B
174 B
1
1

DNS Request

snippets.cdn.mozilla.net

DNS Response

65.9.86.119

65.9.86.24

65.9.86.52

65.9.86.64
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
131 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:92a9::
8.8.8.8:53

d228z91au11ukj.cloudfront.net

dns

firefox.exe

75 B
139 B
1
1

DNS Request

d228z91au11ukj.cloudfront.net

DNS Response

65.9.86.24

65.9.86.119

65.9.86.52

65.9.86.64
8.8.8.8:53

d228z91au11ukj.cloudfront.net

dns

firefox.exe

75 B
156 B
1
1

DNS Request

d228z91au11ukj.cloudfront.net
8.8.8.8:53

cs9.wac.phicdn.net

dns

firefox.exe

64 B
80 B
1
1

DNS Request

cs9.wac.phicdn.net

DNS Response

117.18.237.29
8.8.8.8:53

cs9.wac.phicdn.net

dns

firefox.exe

64 B
132 B
1
1

DNS Request

cs9.wac.phicdn.net
8.8.8.8:53

www.facebook.com

dns

firefox.exe

62 B
107 B
1
1

DNS Request

www.facebook.com

DNS Response

157.240.247.35
8.8.8.8:53

www.wikipedia.org

dns

firefox.exe

63 B
108 B
1
1

DNS Request

www.wikipedia.org

DNS Response

103.102.166.224
8.8.8.8:53

dyna.wikimedia.org

dns

firefox.exe

64 B
80 B
1
1

DNS Request

dyna.wikimedia.org

DNS Response

103.102.166.224
8.8.8.8:53

star-mini.c10r.facebook.com

dns

firefox.exe

73 B
89 B
1
1

DNS Request

star-mini.c10r.facebook.com

DNS Response

157.240.196.35
8.8.8.8:53

youtube-ui.l.google.com

dns

firefox.exe

69 B
213 B
1
1

DNS Request

youtube-ui.l.google.com

DNS Response

216.58.214.14

142.250.179.142

142.251.36.46

172.217.168.238

142.250.179.174

142.250.179.206

142.251.36.14

142.251.39.110

172.217.168.206
8.8.8.8:53

youtube-ui.l.google.com

dns

firefox.exe

69 B
181 B
1
1

DNS Request

youtube-ui.l.google.com

DNS Response

2a00:1450:400e:800::200e

2a00:1450:400e:801::200e

2a00:1450:400e:810::200e

2a00:1450:400e:80d::200e
8.8.8.8:53

star-mini.c10r.facebook.com

dns

firefox.exe

73 B
101 B
1
1

DNS Request

star-mini.c10r.facebook.com

DNS Response

2a03:2880:f142:182:face:b00c:0:25de
8.8.8.8:53

www.reddit.com

dns

firefox.exe

60 B
159 B
1
1

DNS Request

www.reddit.com

DNS Response

151.101.1.140

151.101.65.140

151.101.129.140

151.101.193.140
8.8.8.8:53

dyna.wikimedia.org

dns

firefox.exe

64 B
92 B
1
1

DNS Request

dyna.wikimedia.org

DNS Response

2001:df2:e500:ed1a::1
8.8.8.8:53

twitter.com

dns

firefox.exe

57 B
89 B
1
1

DNS Request

twitter.com

DNS Response

104.244.42.65

104.244.42.129
8.8.8.8:53

reddit.map.fastly.net

dns

firefox.exe

67 B
131 B
1
1

DNS Request

reddit.map.fastly.net

DNS Response

151.101.1.140

151.101.65.140

151.101.129.140

151.101.193.140
8.8.8.8:53

twitter.com

dns

firefox.exe

57 B
89 B
1
1

DNS Request

twitter.com

DNS Response

104.244.42.193

104.244.42.1
8.8.8.8:53

twitter.com

dns

firefox.exe

57 B
129 B
1
1

DNS Request

twitter.com
8.8.8.8:53

reddit.map.fastly.net

dns

firefox.exe

67 B
128 B
1
1

DNS Request

reddit.map.fastly.net
8.8.8.8:53

pki-goog.l.google.com

dns

firefox.exe

67 B
83 B
1
1

DNS Request

pki-goog.l.google.com

DNS Response

142.251.36.35
8.8.8.8:53

pki-goog.l.google.com

dns

firefox.exe

67 B
95 B
1
1

DNS Request

pki-goog.l.google.com

DNS Response

2a00:1450:400e:810::2003
8.8.8.8:53

apis.google.com

dns

firefox.exe

61 B
98 B
1
1

DNS Request

apis.google.com

DNS Response

216.58.208.110
8.8.8.8:53

plus.l.google.com

dns

firefox.exe

63 B
79 B
1
1

DNS Request

plus.l.google.com

DNS Response

216.58.208.110
8.8.8.8:53

plus.l.google.com

dns

firefox.exe

63 B
91 B
1
1

DNS Request

plus.l.google.com

DNS Response

2a00:1450:400e:80e::200e
8.8.8.8:53

play.google.com

dns

firefox.exe

61 B
77 B
1
1

DNS Request

play.google.com

DNS Response

142.251.36.14
8.8.8.8:53

googleads.g.doubleclick.net

dns

firefox.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

172.217.168.226
8.8.8.8:53

play.google.com

dns

firefox.exe

61 B
77 B
1
1

DNS Request

play.google.com

DNS Response

142.251.36.14
8.8.8.8:53

googleads.g.doubleclick.net

dns

firefox.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

172.217.168.226
8.8.8.8:53

play.google.com

dns

firefox.exe

61 B
89 B
1
1

DNS Request

play.google.com

DNS Response

2a00:1450:400e:80f::200e
8.8.8.8:53

googleads.g.doubleclick.net

dns

firefox.exe

73 B
101 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

2a00:1450:400e:802::2002
8.8.8.8:53

github.com

dns

firefox.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

20.207.73.82
8.8.8.8:53

github.com

dns

firefox.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

20.207.73.82
8.8.8.8:53

github.com

dns

firefox.exe

56 B
121 B
1
1

DNS Request

github.com
8.8.8.8:53

cs9.wac.phicdn.net

dns

firefox.exe

64 B
132 B
1
1

DNS Request

cs9.wac.phicdn.net
8.8.8.8:53

github.githubassets.com

dns

firefox.exe

69 B
133 B
1
1

DNS Request

github.githubassets.com

DNS Response

185.199.108.154

185.199.109.154

185.199.110.154

185.199.111.154
8.8.8.8:53

github.githubassets.com

dns

firefox.exe

69 B
133 B
1
1

DNS Request

github.githubassets.com

DNS Response

185.199.110.154

185.199.111.154

185.199.108.154

185.199.109.154
8.8.8.8:53

github.githubassets.com

dns

firefox.exe

69 B
151 B
1
1

DNS Request

github.githubassets.com
8.8.8.8:53

avatars.githubusercontent.com

dns

firefox.exe

75 B
139 B
1
1

DNS Request

avatars.githubusercontent.com

DNS Response

185.199.111.133

185.199.108.133

185.199.109.133

185.199.110.133
8.8.8.8:53

avatars.githubusercontent.com

dns

firefox.exe

75 B
139 B
1
1

DNS Request

avatars.githubusercontent.com

DNS Response

185.199.108.133

185.199.109.133

185.199.110.133

185.199.111.133
8.8.8.8:53

avatars.githubusercontent.com

dns

firefox.exe

75 B
187 B
1
1

DNS Request

avatars.githubusercontent.com

DNS Response

2606:50c0:8000::154

2606:50c0:8001::154

2606:50c0:8002::154

2606:50c0:8003::154
8.8.8.8:53

collector.github.com

dns

firefox.exe

66 B
115 B
1
1

DNS Request

collector.github.com

DNS Response

140.82.114.22
8.8.8.8:53

glb-db52c2cf8be544.github.com

dns

firefox.exe

75 B
91 B
1
1

DNS Request

glb-db52c2cf8be544.github.com

DNS Response

140.82.113.22
8.8.8.8:53

glb-db52c2cf8be544.github.com

dns

firefox.exe

75 B
140 B
1
1

DNS Request

glb-db52c2cf8be544.github.com
8.8.8.8:53

api.github.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

api.github.com

DNS Response

20.207.73.85
8.8.8.8:53

api.github.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

api.github.com

DNS Response

20.207.73.85
8.8.8.8:53

api.github.com

dns

firefox.exe

60 B
125 B
1
1

DNS Request

api.github.com
8.8.8.8:53

user-images.githubusercontent.com

dns

firefox.exe

79 B
143 B
1
1

DNS Request

user-images.githubusercontent.com

DNS Response

185.199.111.133

185.199.108.133

185.199.110.133

185.199.109.133
8.8.8.8:53

user-images.githubusercontent.com

dns

firefox.exe

79 B
143 B
1
1

DNS Request

user-images.githubusercontent.com

DNS Response

185.199.108.133

185.199.110.133

185.199.109.133

185.199.111.133
8.8.8.8:53

user-images.githubusercontent.com

dns

firefox.exe

79 B
191 B
1
1

DNS Request

user-images.githubusercontent.com

DNS Response

2606:50c0:8000::154

2606:50c0:8001::154

2606:50c0:8002::154

2606:50c0:8003::154
8.8.8.8:53

anonfiles.com

dns

firefox.exe

59 B
107 B
1
1

DNS Request

anonfiles.com

DNS Response

45.154.253.150

45.154.253.152

45.154.253.151
8.8.8.8:53

anonfiles.com

dns

firefox.exe

59 B
107 B
1
1

DNS Request

anonfiles.com

DNS Response

45.154.253.151

45.154.253.150

45.154.253.152
8.8.8.8:53

anonfiles.com

dns

firefox.exe

59 B
143 B
1
1

DNS Request

anonfiles.com

DNS Response

2001:678:b30:4::e

2001:678:b30:4::c

2001:678:b30:4::d
8.8.8.8:53

a1887.dscq.akamai.net

dns

firefox.exe

67 B
99 B
1
1

DNS Request

a1887.dscq.akamai.net

DNS Response

88.221.25.162

88.221.25.176
8.8.8.8:53

a1887.dscq.akamai.net

dns

firefox.exe

67 B
123 B
1
1

DNS Request

a1887.dscq.akamai.net

DNS Response

2a02:26f0:b200::1748:fc93

2a02:26f0:b200::1748:fc9b
8.8.8.8:53

vjs.zencdn.net

dns

firefox.exe

60 B
164 B
1
1

DNS Request

vjs.zencdn.net

DNS Response

151.101.2.217

151.101.66.217

151.101.130.217

151.101.194.217
8.8.8.8:53

djv99sxoqpv11.cloudfront.net

dns

firefox.exe

74 B
138 B
1
1

DNS Request

djv99sxoqpv11.cloudfront.net

DNS Response

108.156.61.9

108.156.61.120

108.156.61.22

108.156.61.144
8.8.8.8:53

dualstack.osff.map.fastly.net

dns

firefox.exe

75 B
139 B
1
1

DNS Request

dualstack.osff.map.fastly.net

DNS Response

151.101.2.217

151.101.66.217

151.101.130.217

151.101.194.217
8.8.8.8:53

djv99sxoqpv11.cloudfront.net

dns

firefox.exe

74 B
138 B
1
1

DNS Request

djv99sxoqpv11.cloudfront.net

DNS Response

108.156.61.120

108.156.61.9

108.156.61.22

108.156.61.144
8.8.8.8:53

dualstack.osff.map.fastly.net

dns

firefox.exe

75 B
187 B
1
1

DNS Request

dualstack.osff.map.fastly.net

DNS Response

2a04:4e42::729

2a04:4e42:200::729

2a04:4e42:400::729

2a04:4e42:600::729
8.8.8.8:53

djv99sxoqpv11.cloudfront.net

dns

firefox.exe

74 B
141 B
1
1

DNS Request

djv99sxoqpv11.cloudfront.net
8.8.8.8:53

baconaces.pro

dns

firefox.exe

59 B
91 B
1
1

DNS Request

baconaces.pro

DNS Response

54.162.51.18

52.20.131.174
8.8.8.8:53

baconaces.pro

dns

firefox.exe

59 B
91 B
1
1

DNS Request

baconaces.pro

DNS Response

54.162.51.18

52.20.131.174
8.8.8.8:53

pogothere.xyz

dns

firefox.exe

59 B
91 B
1
1

DNS Request

pogothere.xyz

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

baconaces.pro

dns

firefox.exe

59 B
122 B
1
1

DNS Request

baconaces.pro
8.8.8.8:53

osiextantly.com

dns

firefox.exe

305 B
5

DNS Request

osiextantly.com

DNS Request

osiextantly.com

DNS Request

osiextantly.com

DNS Request

osiextantly.com

DNS Request

osiextantly.com
8.8.8.8:53

ldpiecesonth.xyz

dns

firefox.exe

62 B
94 B
1
1

DNS Request

ldpiecesonth.xyz

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

accounts.google.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

accounts.google.com

DNS Response

142.251.36.45
8.8.8.8:53

pogothere.xyz

dns

firefox.exe

59 B
91 B
1
1

DNS Request

pogothere.xyz

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

ldpiecesonth.xyz

dns

firefox.exe

62 B
94 B
1
1

DNS Request

ldpiecesonth.xyz

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

accounts.google.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

accounts.google.com

DNS Response

142.251.36.45
8.8.8.8:53

pogothere.xyz

dns

firefox.exe

59 B
121 B
1
1

DNS Request

pogothere.xyz
8.8.8.8:53

accounts.google.com

dns

firefox.exe

65 B
93 B
1
1

DNS Request

accounts.google.com

DNS Response

2a00:1450:400e:810::200d
8.8.8.8:53

ldpiecesonth.xyz

dns

firefox.exe

62 B
125 B
1
1

DNS Request

ldpiecesonth.xyz
8.8.8.8:53

e1.o.lencr.org

dns

firefox.exe

60 B
159 B
1
1

DNS Request

e1.o.lencr.org

DNS Response

88.221.25.162

88.221.25.176
8.8.8.8:53

thecoveos.com

dns

firefox.exe

59 B
91 B
1
1

DNS Request

thecoveos.com

DNS Response

52.20.131.174

54.162.51.18
8.8.8.8:53

thecoveos.com

dns

firefox.exe

59 B
91 B
1
1

DNS Request

thecoveos.com

DNS Response

52.20.131.174

54.162.51.18
8.8.8.8:53

thecoveos.com

dns

firefox.exe

59 B
119 B
1
1

DNS Request

thecoveos.com
8.8.8.8:53

osiextantly.com

dns

firefox.exe

61 B
125 B
1
1

DNS Request

osiextantly.com

DNS Response

52.222.139.45

52.222.139.10

52.222.139.30

52.222.139.83
8.8.8.8:53

osiextantly.com

dns

firefox.exe

61 B
125 B
1
1

DNS Request

osiextantly.com

DNS Response

52.222.139.45

52.222.139.10

52.222.139.30

52.222.139.83
8.8.8.8:53

osiextantly.com

dns

firefox.exe

61 B
121 B
1
1

DNS Request

osiextantly.com
8.8.8.8:53

teambee.website

dns

firefox.exe

61 B
93 B
1
1

DNS Request

teambee.website

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

teambee.website

dns

firefox.exe

61 B
93 B
1
1

DNS Request

teambee.website

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

teambee.website

dns

firefox.exe

61 B
123 B
1
1

DNS Request

teambee.website
8.8.8.8:53

streamdeer.icu

dns

firefox.exe

60 B
92 B
1
1

DNS Request

streamdeer.icu

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

streamdeer.icu

dns

firefox.exe

60 B
92 B
1
1

DNS Request

streamdeer.icu

DNS Response

188.114.96.0

188.114.97.0
8.8.8.8:53

streamdeer.icu

dns

firefox.exe

60 B
122 B
1
1

DNS Request

streamdeer.icu
8.8.8.8:53

suntrees.icu

dns

firefox.exe

58 B
90 B
1
1

DNS Request

suntrees.icu

DNS Response

172.67.173.24

104.21.63.235
8.8.8.8:53

suntrees.icu

dns

firefox.exe

58 B
90 B
1
1

DNS Request

suntrees.icu

DNS Response

104.21.63.235

172.67.173.24
8.8.8.8:53

suntrees.icu

dns

firefox.exe

58 B
120 B
1
1

DNS Request

suntrees.icu
8.8.8.8:53

wastewire.xyz

dns

firefox.exe

59 B
91 B
1
1

DNS Request

wastewire.xyz

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

wastewire.xyz

dns

firefox.exe

59 B
91 B
1
1

DNS Request

wastewire.xyz

DNS Response

188.114.97.0

188.114.96.0
8.8.8.8:53

code.jquery.com

dns

firefox.exe

61 B
129 B
1
1

DNS Request

code.jquery.com

DNS Response

69.16.175.42

69.16.175.10
8.8.8.8:53

nostop.go2cloud.org

dns

firefox.exe

65 B
113 B
1
1

DNS Request

nostop.go2cloud.org

DNS Response

18.202.12.61

52.210.2.133

52.210.174.128
8.8.8.8:53

cds.s5x3j6q5.hwcdn.net

dns

firefox.exe

68 B
100 B
1
1

DNS Request

cds.s5x3j6q5.hwcdn.net

DNS Response

69.16.175.10

69.16.175.42
8.8.8.8:53

wastewire.xyz

dns

firefox.exe

59 B
121 B
1
1

DNS Request

wastewire.xyz
8.8.8.8:53

cds.s5x3j6q5.hwcdn.net

dns

firefox.exe

68 B
236 B
1
1

DNS Request

cds.s5x3j6q5.hwcdn.net

DNS Response

2001:4de0:ac18::1:a:3b

2001:4de0:ac18::1:a:2b

2001:4de0:ac18::1:a:2a

2001:4de0:ac18::1:a:1a

2001:4de0:ac18::1:a:3a

2001:4de0:ac18::1:a:1b
8.8.8.8:53

nostop.go2cloud.org

dns

firefox.exe

65 B
113 B
1
1

DNS Request

nostop.go2cloud.org

DNS Response

52.210.174.128

52.210.2.133

18.202.12.61
8.8.8.8:53

nostop.go2cloud.org

dns

firefox.exe

130 B
292 B
2
2

DNS Request

nostop.go2cloud.org

DNS Request

nostop.go2cloud.org
8.8.8.8:53

yourjsdelivery.com

dns

firefox.exe

64 B
112 B
1
1

DNS Request

yourjsdelivery.com

DNS Response

172.67.74.130

104.26.5.109

104.26.4.109
8.8.8.8:53

ajax.googleapis.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

ajax.googleapis.com

DNS Response

142.250.179.138
8.8.8.8:53

ajax.googleapis.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

ajax.googleapis.com

DNS Response

142.250.179.138
8.8.8.8:53

yourjsdelivery.com

dns

firefox.exe

64 B
112 B
1
1

DNS Request

yourjsdelivery.com

DNS Response

104.26.5.109

104.26.4.109

172.67.74.130
8.8.8.8:53

yourjsdelivery.com

dns

firefox.exe

64 B
123 B
1
1

DNS Request

yourjsdelivery.com
8.8.8.8:53

ajax.googleapis.com

dns

firefox.exe

65 B
93 B
1
1

DNS Request

ajax.googleapis.com

DNS Response

2a00:1450:400e:811::200a
8.8.8.8:53

support.mozilla.org

dns

firefox.exe

65 B
167 B
1
1

DNS Request

support.mozilla.org

DNS Response

34.149.128.2
8.8.8.8:53

prod.sumo.prod.webservices.mozgcp.net

dns

firefox.exe

83 B
99 B
1
1

DNS Request

prod.sumo.prod.webservices.mozgcp.net

DNS Response

34.149.128.2
8.8.8.8:53

prod.sumo.prod.webservices.mozgcp.net

dns

firefox.exe

83 B
176 B
1
1

DNS Request

prod.sumo.prod.webservices.mozgcp.net
8.8.8.8:53

cdn-115.anonfiles.com

dns

firefox.exe

134 B
166 B
2
2

DNS Request

cdn-115.anonfiles.com

DNS Request

cdn-115.anonfiles.com

DNS Response

195.96.151.67

DNS Response

195.96.151.67
8.8.8.8:53

cdn-115.anonfiles.com

dns

firefox.exe

67 B
83 B
1
1

DNS Request

cdn-115.anonfiles.com

DNS Response

195.96.151.67
8.8.8.8:53

cdn-115.anonfiles.com

dns

firefox.exe

67 B
95 B
1
1

DNS Request

cdn-115.anonfiles.com

DNS Response

2a12:1e01:0:6::3
8.8.8.8:53

opengraph.githubassets.com

dns

firefox.exe

72 B
136 B
1
1

DNS Request

opengraph.githubassets.com

DNS Response

185.199.108.154

185.199.109.154

185.199.110.154

185.199.111.154
8.8.8.8:53

opengraph.githubassets.com

dns

firefox.exe

72 B
136 B
1
1

DNS Request

opengraph.githubassets.com

DNS Response

185.199.108.154

185.199.109.154

185.199.110.154

185.199.111.154
8.8.8.8:53

opengraph.githubassets.com

dns

firefox.exe

72 B
137 B
1
1

DNS Request

opengraph.githubassets.com

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2708-115-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-116-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-117-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-118-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-119-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-120-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-121-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-122-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-123-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-124-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-126-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-125-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-127-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-128-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-129-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-130-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-131-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-132-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-134-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-135-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-136-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-137-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-138-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-139-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-140-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-141-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-133-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-142-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-143-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-144-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-146-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-147-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-145-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-148-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-150-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-152-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-153-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-154-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-151-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-149-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-155-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-156-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-157-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-158-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-159-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-161-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-162-0x0000000000360000-0x000000000038E000-memory.dmp

Filesize
184KB

Download
memory/2708-163-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-160-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-164-0x0000000005130000-0x0000000005736000-memory.dmp

Filesize
6.0MB

Download
memory/2708-166-0x0000000004B80000-0x0000000004B92000-memory.dmp

Filesize
72KB

Download
memory/2708-167-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-168-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-165-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-169-0x0000000004CB0000-0x0000000004DBA000-memory.dmp

Filesize
1.0MB

Download
memory/2708-170-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-171-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-172-0x0000000004C20000-0x0000000004C5E000-memory.dmp

Filesize
248KB

Download
memory/2708-173-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-174-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-175-0x0000000004C60000-0x0000000004CAB000-memory.dmp

Filesize
300KB

Download
memory/2708-176-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-178-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-177-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-179-0x0000000004F40000-0x0000000004FA6000-memory.dmp

Filesize
408KB

Download
memory/2708-180-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-181-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-182-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-183-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-184-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-185-0x0000000077C70000-0x0000000077DFE000-memory.dmp

Filesize
1.6MB

Download
memory/2708-187-0x0000000005F40000-0x000000000643E000-memory.dmp

Filesize
5.0MB

Download
memory/2708-188-0x0000000005AF0000-0x0000000005B82000-memory.dmp

Filesize
584KB

Download
memory/2708-191-0x0000000005B90000-0x0000000005BE0000-memory.dmp

Filesize
320KB

Download
memory/2708-192-0x0000000005C60000-0x0000000005CD6000-memory.dmp

Filesize
472KB

Download
memory/2708-193-0x0000000006610000-0x00000000067D2000-memory.dmp

Filesize
1.8MB

Download
memory/2708-194-0x0000000006D10000-0x000000000723C000-memory.dmp

Filesize
5.2MB

Download
memory/2708-198-0x0000000005F00000-0x0000000005F1E000-memory.dmp

Filesize
120KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request