static.enlisted.net/modern-3/en/images/59025fa3883ccadaaca5f2c8d2beecfb.png
200 OK 5.2 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/images/59025fa3883ccadaaca5f2c8d2beecfb.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type PNG image data, 136 x 136, 8-bit colormap, non-interlaced\012- data
Hash 9485d4a367f663a6728b7d69fd6f3a1a
7a434a7bfb9dea7ec5f1c17167de5b8376145c45
f4c8dd99b4b7c8c1020221f69db68c094f515d62cb2befac7acafa3ca7e48bab
GET /modern-3/en/images/59025fa3883ccadaaca5f2c8d2beecfb.png HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/png
content-length: 5238
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-1476"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-91d5de70cb5ec7f264930704edda1294-1cae348f8a77c2fb-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/images/a88d243987e16e7f60367edd131c7746.png
200 OK 82 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/images/a88d243987e16e7f60367edd131c7746.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type PNG image data, 1080 x 541, 8-bit colormap, non-interlaced\012- data
Hash 85bf4e9e3ea54037956ebe8b2855c635
a1f53c718d6085cfd95a666e29d26482ebd0c76b
5f50f9b2dec4d9f9b1c2ae4a09dbba689259b2e2d72e0339cffd4187dcc7725d
GET /modern-3/en/images/a88d243987e16e7f60367edd131c7746.png HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/png
content-length: 81548
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-13e8c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-433a90de0656c4061a1395406ab37ed9-3eb64c96de04e19b-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/images/aa49df6140e6686b245b0aadd5abc695.jpg
200 OK 358 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/images/aa49df6140e6686b245b0aadd5abc695.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1080, components 3\012- data
Size 358 kB (358276 bytes)
Hash 9d3dc574a4eb5340b6c55161ad05449c
ab136310da6abc3d4e612b1a9dde22d51567db06
9bff4210e822b4e4fa0259ee7604a04cf4a8bb4816875a7db52479609760eda0
GET /modern-3/en/images/aa49df6140e6686b245b0aadd5abc695.jpg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/jpeg
content-length: 358276
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-57784"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-8933bce8824e0a7fcab325b01a89614c-7a1e94bdbecf9325-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/images/26456c0c8323150fb783ee6547ebfcb2.png
200 OK 116 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/images/26456c0c8323150fb783ee6547ebfcb2.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type PNG image data, 376 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size 116 kB (115460 bytes)
Hash c9dff2977a9533036aecde99b6ba090c
3ff41b20f669fda65897b10c251e30e38164c6f9
2618c6a003eb8a73d9b5c0f9d20f1fbc70051942326cabd7a1c51e07a4bb8f5b
GET /modern-3/en/images/26456c0c8323150fb783ee6547ebfcb2.png HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/png
content-length: 115460
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-1c304"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-3508a8f6bb0ffc46d921f1b5b2ddff2b-b4edca61900151ec-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/darkflow-logo.svg
200 OK 6.2 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/darkflow-logo.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 86b68f228349b16a25535eec2d688927
5b52eb846acf4b63113e6e28bdd8945e26bc6147
3198e943d52a1122e658b958ad5c5c438c141999bc8a147e511231afba910962
GET /modern-3/en/fonts/darkflow-logo.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-2d6c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-62e14cf10cc832793728515c98377a60-a9361bd237d5af5d-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/rate-esrb.svg
200 OK 3.5 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/rate-esrb.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a301fe3b5399be02d0c05d79a8843264
af9d9eaec47461a248edebb8795f748aa1570867
6cd8465b80e67177935d98b182a4fab5791111c1508d3c36222397b7fffae71e
GET /modern-3/en/fonts/rate-esrb.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-1a4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-3f06356254aee08df325ae95a06e608d-f9b936fe6334d846-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v36/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/playfairdisplay/v36/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21904, version 1.0\012- data
Hash b2b5842c6021423696628cab2e05f8d8
31289f7b49287467078233702056c6b44f5b1eb2
5c49dba84c1cbff67508623a16507105bde5be084f2beabcc276b03c4555968e
GET /s/playfairdisplay/v36/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:34:30 GMT
expires: Tue, 03 Dec 2024 20:34:30 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:43:42 GMT
content-type: font/woff2
age: 64316
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/landings/play4free.js?v=7e77368
200 OK 35 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/landings/play4free.js?v=7e77368
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash c146b9407a941fb73adf3794b70ab5e4
4289a9fd53dc92d5688f59bed0651e30c9a2882d
80686e840b7d4e81c7c68cf01fc2ecabb0f725891b9390a4bde1dfe204c0a674
GET /modern-3/en/landings/play4free.js?v=7e77368 HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Mon, 04 Dec 2023 15:21:40 GMT
vary: Accept-Encoding
etag: W/"656dee84-1f35a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-7ae9e893f8d0f9ad7840add20a65f89e-6cc1784a801f3f86-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-12-04T15:23:46+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33116, version 1.0\012- data
Hash 48b1fa647f5ccfa511cc07a10fc22e55
12e1e0d36983a8d900bc66b4784a6f9b9ace4b60
4271064a37f3ffc0aac5f3806db8a72acc23e19447d1804e4e80d8796cbf6330
GET /s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:53:47 GMT
expires: Tue, 03 Dec 2024 23:53:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:52:25 GMT
content-type: font/woff2
age: 52359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/ps5.svg
200 OK 24 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/ps5.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash b651c2f4be6d14c2331b076a8c295def
6869f16d5b337e895614d85fce522c103310a026
98ebed44c91500711323969362d46d223cace35ddbe3ad53f0eb8d4bf6c7b215
GET /modern-3/en/fonts/ps5.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-baa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-680d928d9e11b9b3bb6d730c1cd404cb-ba307b8579f49b90-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasanscondensed/v10/wEOsEADFm8hSaQTFG18FErVhsC9x-tarWQXOuMR0cg.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/firasanscondensed/v10/wEOsEADFm8hSaQTFG18FErVhsC9x-tarWQXOuMR0cg.woff2
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 22760, version 1.0\012- data
Hash f74a85e271c48b935b5caad45ecfecb8
e548a8fd4003f1dd4e20df7bf4dda3f1ff8d066f
bf558b850010169a48f78bd32dc7162613de65038e767c6a2928de1b5c60fb98
GET /s/firasanscondensed/v10/wEOsEADFm8hSaQTFG18FErVhsC9x-tarWQXOuMR0cg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 02:36:26 GMT
expires: Wed, 04 Dec 2024 02:36:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Apr 2022 16:46:06 GMT
content-type: font/woff2
age: 42600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/vendor.js?v=7e77368
200 OK 401 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/vendor.js?v=7e77368
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 401 kB (401405 bytes)
Hash 81574900ba269bba1e471cb10854d28e
0bd8cb3ff0466b3b0998df132495cf5af876feb9
d8d034e6de8971df8f68e516b508dc8fe2c7e58230f576ff6f8ade6e5d140eb9
GET /modern-3/en/vendor.js?v=7e77368 HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Mon, 04 Dec 2023 15:21:41 GMT
vary: Accept-Encoding
etag: W/"656dee85-cfa7b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-c1f0e6cbd38b6b6b3d83dfe3410a905d-77497be10b205a8c-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-12-04T15:23:46+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/favicon.ico
200 OK 4.3 kB URL GET HTTP/2 static.enlisted.net/favicon.ico
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 0e18e8419c0dc9882ddf01065c8aabde
53b8a29e63f588d36e4e14134b6f562c08ed6fd9
a9ea77a88fa39213767a2f627c208c488690a9419d5edcdd2eacc4beb838c5e0
GET /favicon.ico HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:27 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-10be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-3d6075b3285a4f60b527289890de1a10-bf4af46d72002337-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:37+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
status.geotrust.com/
471 B IP
Hash b9c35dd3edd86f3c5febff3153b221fe
e4eb0517d7131593ec79b7b8665c30b05719ea62
9cad5473aa514eb21d3d466ef0e02138a0aee43cdafcb7416ca6445bdb3ed8ba
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1610
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Tue, 05 Dec 2023 14:26:27 GMT
Last-Modified: Tue, 05 Dec 2023 13:59:37 GMT
Server: ECAcc (amb/6B67)
X-Cache: HIT
Content-Length: 471
uep.gaijin.net:8383/track_pixel?event=track_pixel&data=eyJ1cmwiOiJodHRwczpcL1wvZW5saXN0ZWQubmV0XC9lblwvcGxheTRmcmVlXC8%2Fcj1wd25jcHBfMjg0NV8zNiZ0cmFuc2FjdGlvbl9pZD0yODQyOTJjNDA1NzI0YWI0ODgzYjc2MGM1Mjg2OTQxNSIsImlwIjoiOTEuOTAuNDIuMTU0IiwibGFuZ191cmwiOiJlbiIsImxhbmdfZ2VvIjoiZW4iLCJzYWx0IjoiYmZiNzkzNjEyYWQzZWIxNDQ2Y2FjMzFjNjc3ZDA2NDMifQ%3D%3D&public_key=ts9573zKtE7DgVf2TZxt&crc=3b4f71f9f5ace970832fbfbebcfb066b
200 OK 99 B URL GET HTTP/1.1 uep.gaijin.net:8383/track_pixel?event=track_pixel&data=eyJ1cmwiOiJodHRwczpcL1wvZW5saXN0ZWQubmV0XC9lblwvcGxheTRmcmVlXC8%2Fcj1wd25jcHBfMjg0NV8zNiZ0cmFuc2FjdGlvbl9pZD0yODQyOTJjNDA1NzI0YWI0ODgzYjc2MGM1Mjg2OTQxNSIsImlwIjoiOTEuOTAuNDIuMTU0IiwibGFuZ191cmwiOiJlbiIsImxhbmdfZ2VvIjoiZW4iLCJzYWx0IjoiYmZiNzkzNjEyYWQzZWIxNDQ2Y2FjMzFjNjc3ZDA2NDMifQ%3D%3D&public_key=ts9573zKtE7DgVf2TZxt&crc=3b4f71f9f5ace970832fbfbebcfb066b
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerDigiCert Inc
Subject*.gaijin.net
FingerprintD7:CC:19:F7:50:42:FE:24:D0:2F:48:55:40:FF:CE:88:55:1B:DD:AB
ValidityTue, 14 Mar 2023 00:00:00 GMT - Fri, 12 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 0f33714c87d4bac235a575f42cde5712
75b3f2fcd2376207fc0edd3628e0393dd13ac3da
8bafcfa87f73694b56ed9d5b601a7179d1d0683d8dcedc6b1e7f201791065634
GET /track_pixel?event=track_pixel&data=eyJ1cmwiOiJodHRwczpcL1wvZW5saXN0ZWQubmV0XC9lblwvcGxheTRmcmVlXC8%2Fcj1wd25jcHBfMjg0NV8zNiZ0cmFuc2FjdGlvbl9pZD0yODQyOTJjNDA1NzI0YWI0ODgzYjc2MGM1Mjg2OTQxNSIsImlwIjoiOTEuOTAuNDIuMTU0IiwibGFuZ191cmwiOiJlbiIsImxhbmdfZ2VvIjoiZW4iLCJzYWx0IjoiYmZiNzkzNjEyYWQzZWIxNDQ2Y2FjMzFjNjc3ZDA2NDMifQ%3D%3D&public_key=ts9573zKtE7DgVf2TZxt&crc=3b4f71f9f5ace970832fbfbebcfb066b HTTP/1.1
Host: uep.gaijin.net:8383
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
Date: Tue, 05 Dec 2023 14:26:27 GMT
Connection: keep-alive
Content-Length: 99
static.enlisted.net/modern-3/en/fonts/xbox.svg
200 OK 10 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/xbox.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 091953a095eb63e468c261054d0ee12e
a2bcb0e937be4396c149d73b45ad3dad438fe854
3792fd61d71fdf3961187668c3d176a51b34b580b2919ba63845d4d21913c7f4
GET /modern-3/en/fonts/xbox.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-2bd4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-c0622a437bdf73bcee141ccba2e6ca03-bafa91045d299211-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-B6DR73915T&l=dataLayer&cx=c
200 OK 96 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-B6DR73915T&l=dataLayer&cx=c
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (7711)
Hash 26c2f9918bd7253299f63e27f3e37aaf
19774a560d7d88a7ebc7c1e583221d0317afd9fa
5c4da50424080c8d86056f1005ad6d081d5979c76bc06a55d15adda2148af41a
GET /gtag/js?id=G-B6DR73915T&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 14:26:27 GMT
expires: Tue, 05 Dec 2023 14:26:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95563
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.enlisted.net/i/lp/back.mp4
206 Partial Content 29 kB URL GET HTTP/2 static.enlisted.net/i/lp/back.mp4
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
Hash 5864be247f2c36888ed57f8e46eb8e9a
0d8f0c24df469000667685ea7ed5ab91a9b03b28
f20b2a70534ef328270bb3f2214490ccd90de43bd877adb0ac6b2cb4055a431a
GET /i/lp/back.mp4 HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Range: bytes=9994240-
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp; _gcl_au=1.1.2085426836.1701786393
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Tue, 05 Dec 2023 14:26:27 GMT
content-type: video/mp4
content-length: 28885
last-modified: Thu, 13 Jul 2023 08:17:08 GMT
etag: "64afb304-98f0d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-2603b101eae0311f0193c08326c4276e-ebeaf8e4e3edea0b-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:36+00:00
content-range: bytes 9994240-10023124/10023125
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Fira+Sans:wght@400;500&display=swap
200 OK 33 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Fira+Sans:wght@400;500&display=swap
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 8e0d6949487a884a0e09fa43e5542205
08e03395830fef23dd31d11956719e2b1213e21e
0a9d38c866df12e2f25ef840d14874089c532161004ff3bdb528a9004896a8b7
GET /css2?family=Fira+Sans:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 14:26:26 GMT
date: Tue, 05 Dec 2023 14:26:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.enlisted.net/i/lp/back.ogv
2.0 MB URL GET static.enlisted.net/i/lp/back.ogv
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type Ogg data, Theora video\012- data
Size 2.0 MB (1979267 bytes)
Hash 2df5eef0622db041ee9b89173ab23387
2511881262eb60118e189380b0da9c99e6b41e21
655e05ed17bbfb2b1553f23ab2df8cdeb1290d031892849ce79b0c8e0a826b02
GET /i/lp/back.ogv HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Range: bytes=0-
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp; _gcl_au=1.1.2085426836.1701786393
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Tue, 05 Dec 2023 14:26:27 GMT
content-type: application/octet-stream
content-length: 9830188
last-modified: Tue, 07 Nov 2023 10:48:07 GMT
etag: "654a15e7-95ff2c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-e3e66720785a2d8edb04821109c52326-5275004162d5ee80-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-11-27T12:08:12+00:00
content-range: bytes 0-9830187/9830188
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B6DR73915T&cid=1344471545.1701786393>m=45je3bt0v9106709941z879387493&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=11t1t1l1l5&z=1748512599
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B6DR73915T&cid=1344471545.1701786393>m=45je3bt0v9106709941z879387493&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=11t1t1l1l5&z=1748512599
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B6DR73915T&cid=1344471545.1701786393>m=45je3bt0v9106709941z879387493&aip=1&dma=1&dma_cps=sypham&gcs=G111&gcd=11t1t1l1l5&z=1748512599 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 05 Dec 2023 14:26:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.7 kB IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 68a83b009f787d7f68dfbafc3257f5b1
76aea5be97e611fa1c8d40299502e6b9cd2a1ff2
bee0dc10bdb733b2f8d24953fcdf42a15bf15182a59027e6be80ab81beb74f4c
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: oBfzm+fmyTXPGwoVqZZtA3W96RM6rfVnXs/20Qiz4g8WjNWXUoncmPmXLSGRtiYaPoBZR1s/Egs=
x-amz-request-id: Z6R56M3ZCWXWTVVS
date: Tue, 05 Dec 2023 14:25:58 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 30
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/p/action/5665554.js
204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/5665554.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5665554.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CDC64274EFA54C50AC86B0052BFCEE9F Ref B: OSL30EDGE0205 Ref C: 2023-12-05T14:26:27Z
date: Tue, 05 Dec 2023 14:26:27 GMT
X-Firefox-Spdy: h2
consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/version.json?v=1701786393893
200 OK 44 B URL GET HTTP/2 consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/version.json?v=1701786393893
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3eb702bdd641a199ef7059de4565c996
2cb98f6b3a3a547d6ec0afc1e068b65a9eff61d8
b30c34fca04c575f3deeb70de2a546ab310b52f109c3e3fbab94ddbf22d8c097
GET /sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/version.json?v=1701786393893 HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/json
content-length: 44
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=15
etag: "656bf418-2c"
last-modified: Sun, 03 Dec 2023 03:20:56 GMT
cdn-storageserver: SE-344
cdn-fileserver: 584
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/05/2023 14:26:28
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: d504f7fb55903586d7d2e08b0ffe0f62
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
consent.cookiefirst.com/banner.js?cookiefirst-key=8cb9e23d-5278-44b4-bcc2-a27e465e218e&stealth-mode=true&language=inherit&silent-mode=true
200 OK 24 kB URL GET HTTP/2 consent.cookiefirst.com/banner.js?cookiefirst-key=8cb9e23d-5278-44b4-bcc2-a27e465e218e&stealth-mode=true&language=inherit&silent-mode=true
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (61663), with no line terminators
Hash 6cb7c23c64dd66a1e8b126c68c90adc1
015eca981545814101be0ca0e057f8be1d03e799
fcbcce654546ca3d97e4efbf5e5a434814bb6bd1c41ace376ae8e4094e58203f
GET /banner.js?cookiefirst-key=8cb9e23d-5278-44b4-bcc2-a27e465e218e&stealth-mode=true&language=inherit&silent-mode=true HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:27 GMT
content-type: application/javascript
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=300
etag: W/"6565d5fa-f0df"
last-modified: Tue, 28 Nov 2023 11:58:50 GMT
cdn-storageserver: SE-344
cdn-fileserver: 584
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/29/2023 22:48:19
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: d873040aee86a8c4cfe2accbff1d2567
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5665554&Ver=2&mid=edf302f2-9ec6-4426-9fce-3322bdd98531&sid=4a67d910937a11ee802aff52b8566abc&vid=4a67dea0937a11ee91ab534a7a91ddc3&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&p=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&r=<=1556&evt=pageLoad&sv=1&rn=63139
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=5665554&Ver=2&mid=edf302f2-9ec6-4426-9fce-3322bdd98531&sid=4a67d910937a11ee802aff52b8566abc&vid=4a67dea0937a11ee91ab534a7a91ddc3&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&p=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&r=<=1556&evt=pageLoad&sv=1&rn=63139
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5665554&Ver=2&mid=edf302f2-9ec6-4426-9fce-3322bdd98531&sid=4a67d910937a11ee802aff52b8566abc&vid=4a67dea0937a11ee91ab534a7a91ddc3&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&p=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&r=<=1556&evt=pageLoad&sv=1&rn=63139 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=38308B1C6F3269882B1098C26EC76834; domain=.bing.com; expires=Sun, 29-Dec-2024 14:26:28 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A63DE811B76E410A9ACB38FDF18569B9 Ref B: OSL30EDGE0205 Ref C: 2023-12-05T14:26:27Z
date: Tue, 05 Dec 2023 14:26:27 GMT
X-Firefox-Spdy: h2
static.enlisted.net/i/lp/back.ogv
8.7 MB URL GET static.enlisted.net/i/lp/back.ogv
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
Size 8.7 MB (8650540 bytes)
Hash c2e4b671719d6657e1ef3d7a25f9f6d4
f7293be1032abf96a130dccbbce32cd87d53ea03
db276a0e0da8388d0110c7430597a457b5730ec247e9e1ae13836a9063d02355
GET /i/lp/back.ogv HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Range: bytes=1179648-
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp; _gcl_au=1.1.2085426836.1701786393; _ga_B6DR73915T=GS1.1.1701786393.1.0.1701786393.60.0.0; _ga=GA1.1.1344471545.1701786393; _uetsid=4a67d910937a11ee802aff52b8566abc; _uetvid=4a67dea0937a11ee91ab534a7a91ddc3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/octet-stream
content-length: 8650540
last-modified: Tue, 07 Nov 2023 10:48:07 GMT
etag: "654a15e7-95ff2c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-007bb22ebede6fec63a7c14f2abf4e8d-f9f84c16c81bd931-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-11-27T12:08:12+00:00
content-range: bytes 1179648-9830187/9830188
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10020777.json
200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10020777.json
IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10020777.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 08PN9BB6HH2ZYKZ6
x-amz-id-2: SGjlEnUxy1l7rqdo/skVwbtXrhbXs//N/qIEqYbKOMvkkbmuPrGMB25/ME3CwahVLcaM9szcpaI=
content-type: application/json
date: Tue, 05 Dec 2023 14:24:35 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 113
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941z879387493&_p=1701786392580&_gaz=1&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_s=1&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1960
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941z879387493&_p=1701786392580&_gaz=1&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_s=1&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1960
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941z879387493&_p=1701786392580&_gaz=1&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_s=1&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1960 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://enlisted.net
date: Tue, 05 Dec 2023 14:26:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/config.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2
200 OK 1.2 kB URL GET HTTP/2 consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/config.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2379), with no line terminators
Hash 877fb37cc201432c931c0cccde02c3b8
fd1e59d5f8b0acd5e8a01ee0866f4c23d3fe33db
661346e8e0023c087fe425935b710f3b4c6c2cb01ce861f7bb30881bdefd81e6
GET /sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/config.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2 HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/json
vary: Accept-Encoding
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=30
etag: W/"656bf40a-94b"
last-modified: Sun, 03 Dec 2023 03:20:42 GMT
cdn-storageserver: SE-344
cdn-fileserver: 585
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/03/2023 03:55:41
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: 7812edb7f2ef2087cbdb2fd2b288b964
cdn-cache: REVALIDATED
content-encoding: br
X-Firefox-Spdy: h2
consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/lang-widget-en.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2
200 OK 3.8 kB URL GET HTTP/2 consent.cookiefirst.com/sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/lang-widget-en.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (9106), with no line terminators
Hash f2828b05a068a35a61c9ea5fd9c30f34
0369f59ff87cedba317c9c54a694b50882e2f3de
07a3230638b3bd66d7b5d500f0278b759bcda3dc9ed55fb566b38931845803fb
GET /sites/enlisted.net-8cb9e23d-5278-44b4-bcc2-a27e465e218e/lang-widget-en.json?v=2658e67f-233d-4e09-b043-16ffb57cdbb2 HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/json
vary: Accept-Encoding
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=31919000
etag: W/"656bf40c-2392"
last-modified: Sun, 03 Dec 2023 03:20:44 GMT
cdn-storageserver: SE-318
cdn-fileserver: 585
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/03/2023 04:58:10
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: 14b6fa898cb44f403224762a1c06e573
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
consent.cookiefirst.com/banner/v2.13.0/static-main/233.8420.c.js
200 OK 96 B URL GET HTTP/2 consent.cookiefirst.com/banner/v2.13.0/static-main/233.8420.c.js
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash cba801e05e2f6008846a8e5793d14fbd
abbba71a707e841765d3d59e198d9070afced1c2
b364babb52cb930beb7e5e61f549d739c155b2f8a24415bb8b401b0d6cb3eddb
GET /banner/v2.13.0/static-main/233.8420.c.js HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/javascript
content-length: 96
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=31919000
etag: "6565d5fb-60"
last-modified: Tue, 28 Nov 2023 11:58:51 GMT
cdn-storageserver: SE-344
cdn-fileserver: 385
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/29/2023 22:49:21
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: 641f4e16f1c0981164b138c217add638
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/incubator-logo.svg
200 OK 1.1 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/incubator-logo.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 1c62521b717882a150ae8f8deed39e26
86b0748d44af0e9562800bc0c15747b64afb87d7
7d5bb09548050869b09104175f50cab6441d5ddf5bb342e2723e2220defea702
GET /modern-3/en/fonts/incubator-logo.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-727"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-fda048ddd80e122db111d729156e1099-c525f27ee929ac3a-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941&_p=1701786392580&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=scroll&epn.percent_scrolled=90&tfd=7021
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941&_p=1701786392580&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=scroll&epn.percent_scrolled=90&tfd=7021
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B6DR73915T>m=45je3bt0v9106709941&_p=1701786392580&gcs=G111&gcd=11t1t1l1l5&dma_cps=sypham&dma=1&cid=1344471545.1701786393&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701786393&sct=1&seg=0&dl=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F%3Fr%3Dpwncpp_2845_36%26transaction_id%3D284292c405724ab4883b760c52869415&dt=Enlisted%20is%20an%20MMO%20squad%20based%20shooter%20in%20World%20War%20II.%20Play%20now!&en=scroll&epn.percent_scrolled=90&tfd=7021 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://enlisted.net
date: Tue, 05 Dec 2023 14:26:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
script.anura.io/response.json
200 OK 43 B URL POST HTTP/2 script.anura.io/response.json
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerAmazon
Subjectscript.anura.io
Fingerprint83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20
ValidityMon, 16 Oct 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 25a884e94c2624678a04867fb51e0ca7
75ac1b3de1fc9e9344e51a6c02316cca0afa856f
7bd04c70953026a0de145c2100d68530a1462568721a983b7ae1cae124992d6d
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4921
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:30 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/pagead/landing?gcs=G111&gcd=11t1t1l1l5&rnd=385133741.1701786393&url=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F&dma_cps=sypham&dma=1>m=45He3bt0n81TFJVH5Fv79387493&auid=2085426836.1701786393
302 Found 0 B URL POST HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=11t1t1l1l5&rnd=385133741.1701786393&url=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F&dma_cps=sypham&dma=1>m=45He3bt0n81TFJVH5Fv79387493&auid=2085426836.1701786393
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pagead/landing?gcs=G111&gcd=11t1t1l1l5&rnd=385133741.1701786393&url=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F&dma_cps=sypham&dma=1>m=45He3bt0n81TFJVH5Fv79387493&auid=2085426836.1701786393 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 05 Dec 2023 14:26:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=11t1t1l1l5&rnd=385133741.1701786393&url=https%3A%2F%2Fenlisted.net%2Fen%2Fplay4free%2F&dma_cps=sypham&dma=1>m=45He3bt0n81TFJVH5Fv79387493&auid=2085426836.1701786393
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
200 OK 7.0 kB URL User Request GET HTTP/2 enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
IP
Certificate IssuerDigiCert Inc
Subject*.enlisted.net
Fingerprint8E:32:75:2A:17:33:15:E8:24:1A:4F:60:B5:C1:3C:67:FA:CB:79:B1
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (7316), with no line terminators
Hash 01a72d94eb2abcdbf49a9cde27bd17fb
8046c672f055a764d6f6464443273e449db45a6e
c25cd73f1866f8b3829e3f0b52f745f4c6601b71785c49aace9461feaa9941c4
GET /en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415 HTTP/1.1
Host: enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: identity_sid=cr5a3rppl4149dsdsonk8u5frb; conntrack=rBMPDGVvMxGjDGv5A0g1Ag==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.0.3
set-cookie: language=en; expires=Wed, 04-Dec-2024 14:26:25 GMT; Max-Age=31536000; path=/; domain=enlisted.net; HttpOnly
afsId=0C0F13AC11336F65F96B0CA302354803; expires=Wed, 04-Dec-2024 14:26:25 GMT; Max-Age=31536000; path=/; domain=enlisted.net
partner_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=enlisted.net
partner_info=aHR0cHM6Ly9lbmxpc3RlZC5uZXQvZW4vcGxheTRmcmVlLz9yPXB3bmNwcF8yODQ1XzM2JnRyYW5zYWN0aW9uX2lkPTI4NDI5MmM0MDU3MjRhYjQ4ODNiNzYwYzUyODY5NDE1; expires=Thu, 04-Jan-2024 14:26:25 GMT; Max-Age=2592000; path=/; HttpOnly
ref_name=pwncpp; path=/; domain=enlisted.net; HttpOnly
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
expires: Tue, 05 Dec 2023 13:26:25 +0000
last-modified: Tue, 05 Dec 2023 14:26:25 GMT
pragma: no-cache
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 830cf6cf28aa0a43-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-TFJVH5F
200 OK 268 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TFJVH5F
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (10060)
Size 268 kB (267653 bytes)
Hash 52179b4d22a14e05485f2c23cfd8f883
931117ffe19d63322938f4e878c20a3402a9d920
c332b226b837ef930367e266742f360dd7dc10027d3a1b21927bd2e080464c9a
GET /gtm.js?id=GTM-TFJVH5F HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 14:26:26 GMT
expires: Tue, 05 Dec 2023 14:26:26 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92967
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 46 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13187
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 10 Nov 2023 20:09:55 GMT
accept-ranges: bytes
etag: "80abcdf1114da1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5BCAB16D45744AC5BC9FE5C5A17204BC Ref B: OSL30EDGE0205 Ref C: 2023-12-05T14:26:27Z
date: Tue, 05 Dec 2023 14:26:27 GMT
X-Firefox-Spdy: h2
edge.cookiefirst.com/prod/location?origin=enlisted.net
200 OK 66 B URL GET HTTP/2 edge.cookiefirst.com/prod/location?origin=enlisted.net
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 230c89282e58faa4d38131d36cfdda6f
b5e593c1972c0a9e546fccac5c9f6ee5424434e8
df3fba8de28f203c564e2806bf0174201f674d4ed6fc46537c97674c69c1d4fc
GET /prod/location?origin=enlisted.net HTTP/1.1
Host: edge.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: application/json; charset=utf-8
content-length: 66
server: BunnyCDN-NO1-830
cdn-pullzone: 717911
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
access-control-allow-origin: https://enlisted.net
cache-control: public, max-age=1200
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/05/2023 14:26:28
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e3cc89586281b350d280a8cb4fb4a4a3
cdn-cache: BYPASS
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/rate-usk.svg
200 OK 7.6 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/rate-usk.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7686), with no line terminators
Hash 3880d47ec3fd2e184dd9f6f259c23cf1
703fde330960b97fdbaf4858baaa51dc404dc69f
755e3b596135912e2c496b7aa461e76ce365d02c999f09a667e8629cc0aa516f
GET /modern-3/en/fonts/rate-usk.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-1dd0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-8fe0af9b60ddb44b332e5ee7c663cc94-4b5e878c85a97d08-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
200 OK 91 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e5dcac1cebc181f42e7a6816b1298ec8
f1394bb0787a690e9d99580d505a6dbdc07f649f
61670f14e7a3473ef86d078c365a337c1cb68fac239ee0c18cf3de88647b274a
GET /modern-3/en/landings/play4free.styles.css?v=7e77368 HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
DNT: 1
Connection: keep-alive
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: text/css
last-modified: Mon, 04 Dec 2023 15:21:41 GMT
vary: Accept-Encoding
etag: W/"656dee85-16387"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-80e359abe257d812a28cf0b7db6c8108-458784388dd2e659-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-12-04T15:23:46+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasanscondensed/v10/wEOhEADFm8hSaQTFG18FErVhsC9x-tarUfbtrQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/firasanscondensed/v10/wEOhEADFm8hSaQTFG18FErVhsC9x-tarUfbtrQ.woff2
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 22768, version 1.0\012- data
Hash 57f3ab8371bc1d52ab587aab7f9f6ec3
00144246ebbb7685d1d9e998fedfa289c8bd69eb
5a9980abca3b078a7c67a296f602f48bb043c2167e0e8257addfe2d603643a07
GET /s/firasanscondensed/v10/wEOhEADFm8hSaQTFG18FErVhsC9x-tarUfbtrQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22768
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:49:01 GMT
expires: Thu, 28 Nov 2024 21:49:01 GMT
cache-control: public, max-age=31536000
age: 491845
last-modified: Thu, 21 Apr 2022 16:50:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
enlisted.net/en/play4free?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
301 Moved Permanently 7.0 kB URL User Request GET HTTP/2 enlisted.net/en/play4free?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
IP
Certificate IssuerDigiCert Inc
Subject*.enlisted.net
Fingerprint8E:32:75:2A:17:33:15:E8:24:1A:4F:60:B5:C1:3C:67:FA:CB:79:B1
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/play4free?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415 HTTP/1.1
Host: enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 14:26:25 GMT
content-type: text/html; charset=UTF-8
location: https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
x-powered-by: PHP/8.0.3
set-cookie: identity_sid=cr5a3rppl4149dsdsonk8u5frb; expires=Tue, 19-Dec-2023 14:26:25 GMT; Max-Age=1209600; path=/
conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; expires=Wed, 04-Dec-24 14:26:25 GMT; domain=enlisted.net; path=/
cache-control: private, max-age=10800
last-modified: Mon, 04 Dec 2023 15:21:40 GMT
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 830cf6ce2f430a43-ARN
X-Firefox-Spdy: h2
script.anura.io/request.js?instance=3952744944&exid=0C0F13AC11336F65F96B0CA302354803&source=pwncpp&campaign=2845_36&305605572473
200 OK 56 kB URL GET HTTP/2 script.anura.io/request.js?instance=3952744944&exid=0C0F13AC11336F65F96B0CA302354803&source=pwncpp&campaign=2845_36&305605572473
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerAmazon
Subjectscript.anura.io
Fingerprint83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20
ValidityMon, 16 Oct 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (1912)
Hash 4adb6b1825d9af683745f24d11450064
d0a453194b41cfc931b1282ee128a6ebe2d33a17
33a4b3046ea7aca1c65ea73a3c0ccdf8d27f4e63297fea3116ebf144ee8bd7d8
GET /request.js?instance=3952744944&exid=0C0F13AC11336F65F96B0CA302354803&source=pwncpp&campaign=2845_36&305605572473 HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:29 GMT
content-type: application/javascript; charset=utf-8
server: nginx
vary: Accept-Encoding
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
consent.cookiefirst.com/banner/v2.13.0/static-main/233.362b.c.css
200 OK 127 B URL GET HTTP/2 consent.cookiefirst.com/banner/v2.13.0/static-main/233.362b.c.css
IP
ASN #34989 ServeTheWorld AS
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerSectigo Limited
Subject*.cookiefirst.com
Fingerprint75:22:79:6F:76:D4:CF:AF:D0:13:47:69:F9:3C:80:A6:0A:6A:E4:2F
ValidityTue, 05 Dec 2023 00:00:00 GMT - Mon, 16 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 526f8c46ab131ab5d52e4848cb9a78c0
341f9f54fe9759f375e824c08c57cf026ef2eb67
e7902b56545718b3f9dcc015b4acab60270239d559b0adaae9e5c81dd95a89a1
GET /banner/v2.13.0/static-main/233.362b.c.css HTTP/1.1
Host: consent.cookiefirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 14:26:28 GMT
content-type: text/css
content-length: 127
server: Cookie First CDN-NO1-830
cdn-pullzone: 236985
cdn-uid: d602dab6-3f92-4809-a378-608fd2b89403
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, traceparent
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match, visitor-location
cache-control: public, max-age=31919000
etag: "6565d5fa-7f"
last-modified: Tue, 28 Nov 2023 11:58:50 GMT
cdn-storageserver: SE-318
cdn-fileserver: 584
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/28/2023 11:58:51
cdn-edgestorageid: 830
visitor-location: NO
cdn-status: 200
cdn-requestid: 6d0a495a424268c5ffa9d8007c934cdb
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Fira+Sans+Condensed:wght@400;500&family=PT+Serif&family=Playfair+Display&display=swap
200 OK 8.2 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Fira+Sans+Condensed:wght@400;500&family=PT+Serif&family=Playfair+Display&display=swap
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (8365), with no line terminators
Hash dd70efb7772b532948155cebde7e110f
5646b3fd4efe25b17df5283d322afc017c5f62a2
d6da4446a0e42d3a0cb38a28a63d7bc8e47809cb5b7fec89e990c424045f99c5
GET /css2?family=Fira+Sans+Condensed:wght@400;500&family=PT+Serif&family=Playfair+Display&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 14:26:26 GMT
date: Tue, 05 Dec 2023 14:26:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/rate-pegi.svg
200 OK 32 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/rate-pegi.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (26525)
Hash 4bab8e36eb3e38bfb9d73d9c31845361
4d98e3742c804fd3ededa94cbc52fab265edf67f
ac8701bea460052886ce8e9daa2f19597ec100f22b7b98e92d47b6f124253485
GET /modern-3/en/fonts/rate-pegi.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-7da2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-0a07a6cdb69773efca6c1fa44e767f07-da7ad307328dc7ea-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/fonts/ps4.svg
200 OK 3.2 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/fonts/ps4.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3222), with no line terminators
Hash 0fb73b8c2963e464594982f859384608
05b31524fa28358a94803a584b5bd40340427a22
e19dd97eb2819c96e9f616971a18e81cf344d6d6c467e0b7fc629d8e1eb958fe
GET /modern-3/en/fonts/ps4.svg HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:26 GMT
content-type: image/svg+xml
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: W/"64afb305-c72"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-2279585cc7c0ef7e43e0f5b0d7993606-f6861097626b4623-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:35+00:00
content-encoding: gzip
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
static.enlisted.net/modern-3/en/images/46691d86af35e0251bd1ffa4e173f40e.png
200 OK 4.9 kB URL GET HTTP/2 static.enlisted.net/modern-3/en/images/46691d86af35e0251bd1ffa4e173f40e.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerLet's Encrypt
Subjectstatic.enlisted.net
Fingerprint5D:2C:F2:9A:22:3C:14:87:0A:E3:A4:A2:B6:47:A4:AA:4C:37:F9:BA
ValidityMon, 09 Oct 2023 08:50:44 GMT - Sun, 07 Jan 2024 08:50:43 GMT
File type PNG image data, 40 x 406, 8-bit colormap, non-interlaced\012- data
Hash 73ae03c9d7d6aebc3e873b088aa4a102
d8caf6bcc4ecd82c967241049a2e362387311aa9
c2a232d172e09829a81d4b04027a226ab5c666fde6cb204b3e868fc9651f389c
GET /modern-3/en/images/46691d86af35e0251bd1ffa4e173f40e.png HTTP/1.1
Host: static.enlisted.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.enlisted.net/modern-3/en/landings/play4free.styles.css?v=7e77368
Cookie: conntrack=rBMPDGVvMxGjDGv5A0g1Ag==; language=en; afsId=0C0F13AC11336F65F96B0CA302354803; ref_name=pwncpp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 14:26:27 GMT
content-type: image/png
content-length: 4924
last-modified: Thu, 13 Jul 2023 08:17:09 GMT
etag: "64afb305-133c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
traceparent: 00-4abb106beee73fe3a06e38bd15ee4698-0fb155ac06e101c7-01
x-id: osix-hw-edge-gc4
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-07-18T06:55:36+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
ads.anura.io/showads.js?536670554185
200 OK 0 B URL GET HTTP/2 ads.anura.io/showads.js?536670554185
IP
Requested by https://enlisted.net/en/play4free/?r=pwncpp_2845_36&transaction_id=284292c405724ab4883b760c52869415
Certificate IssuerAmazon
Subjectads.anura.io
Fingerprint69:66:FA:26:E2:E4:89:00:9A:F7:DE:2C:F6:5A:C2:B9:58:04:5D:E6
ValidityTue, 30 May 2023 00:00:00 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /showads.js?536670554185 HTTP/1.1
Host: ads.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enlisted.net
DNT: 1
Connection: keep-alive
Referer: https://enlisted.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 04 Dec 2023 19:38:23 GMT
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eOP0W4Qfs23LTyuqJZ35uFQU66GOsSX7yGkCA8YvextWGim1c41SPw==
age: 67686
X-Firefox-Spdy: h2
104.22.43.210
54.230.111.29
52.213.66.57
185.244.209.62
194.242.11.186
3.10.186.13
18.159.105.57
0.0.0.0