playsgift.com/sX/img/photo.png
104.21.24.60200 OK 1.3 MB URL GET HTTP/3 playsgift.com/sX/img/photo.png
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type PNG image data, 1536 x 1536, 8-bit/color RGBA, non-interlaced\012- data
Size 1.3 MB (1268861 bytes)
Hash e3a11e95aaaad8cabe0623bf46d95166
a2881e9a4741db4bb7f471f3ea8a8430acf7bcb0
6ba4b08eedc4720724d673ce9f85c50f9249d60277d61736b2a7fe36a46285ea
GET /sX/img/photo.png HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: image/png
content-length: 1268861
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
etag: "65662946-135c7d"
expires: Sat, 30 Dec 2023 06:11:54 GMT
cache-control: max-age=2678400
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ga2SgReewXfkgx3%2F%2B76C%2FJFMppshSL1xpjfhKf1snfl5pvhdcOWlLEMhsc%2B0y8Khk3VNwD7YN3KYf5Fa%2Bj%2F4aTLOs95EbDv4gXVd4vmqtJzWE93m7p6ZN3qF4Grc0sjP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b191656a9-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
104.17.24.14200 OK 5.8 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP 104.17.24.14:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 659870
expires: Wed, 20 Nov 2024 21:33:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l5sQOk8FvmGhEw5LyiJ1uSP8uvSm4Ce%2FZ%2BLw0msZNdbLm25xP4rvIBG77Bbz8DUt%2FBo2bTgIcMIh%2BPFtbQcbTvitx7DaGCAqEBMs4sP6sZcCixBJ3kzQ40sBFxgvLotVhexuvM25"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ee732c29a9b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-1.10.2.min.js
151.101.194.137200 OK 33 kB URL GET HTTP/2 code.jquery.com/jquery-1.10.2.min.js
IP 151.101.194.137:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32072)
Hash 628072e7212db1e8cdacb22b21752cda
0511abe9863c2ea7084efa7e24d1d86c5b3974f1
0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 01 Dec 2023 21:33:41 GMT
age: 6664220
x-served-by: cache-lga13622-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 47, 4554
x-timer: S1701466421.175277,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.4.1.min.js
151.101.194.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP 151.101.194.137:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 01 Dec 2023 21:33:41 GMT
age: 6664221
x-served-by: cache-lga21965-LGA, cache-bma1636-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 28358
x-timer: S1701466421.188820,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2
i.ibb.co/V9rgBqw/twitter-text.png
162.19.58.157200 OK 4.3 kB URL GET HTTP/2 i.ibb.co/V9rgBqw/twitter-text.png
IP 162.19.58.157:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash fef946b8bba756359e2a1e87ccd915ea
acc364946077b0e32b2343474ce4066ad3ee524c
1be5d05ce6faad469f7f9c5a5879f2d9f8d267b60eb394e92c19217268bcea8f
GET /V9rgBqw/twitter-text.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: image/png
content-length: 4298
last-modified: Mon, 18 Oct 2021 19:35:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/3wBVgZTz/login-Method1.png
162.19.61.80200 OK 29 kB URL GET HTTP/2 i.postimg.cc/3wBVgZTz/login-Method1.png
IP 162.19.61.80:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Hash 74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
GET /3wBVgZTz/login-Method1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: image/png
content-length: 28789
last-modified: Sun, 26 Dec 2021 01:51:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/9XrpfK2B/footer-ppua.png
162.19.61.80200 OK 88 kB URL GET HTTP/2 i.postimg.cc/9XrpfK2B/footer-ppua.png
IP 162.19.61.80:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 6774f33254c7f07a7763bd503b7c918c
9e212fcefaece30889f0aad36e0ead3a41ceb4fe
e072b60dd0fb713c703bf0496b6bc130c8c9653a44746cffb2cf854c090334b4
GET /9XrpfK2B/footer-ppua.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: image/png
content-length: 88464
last-modified: Fri, 21 Oct 2022 13:16:13 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
216.58.207.234200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP 216.58.207.234:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32061)
Hash e40ec2161fe7993196f23c8a07346306
afb90752e0a90c24b7f724faca86c5f3d15d1178
874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:06 GMT
expires: Fri, 29 Nov 2024 14:08:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 113135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
216.58.207.234200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 216.58.207.234:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32180)
Hash 32015dd42e9582a80a84736f5d9a44d7
41b4bfbaa96be6d1440db6e78004ade1c134e276
8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 19:17:06 GMT
expires: Thu, 28 Nov 2024 19:17:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 180995
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
216.58.207.234200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
IP 216.58.207.234:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash d0b3604ceac9c5d6f2a71870d5534aed
ee4de32ff0c2c750fa46a27e6a73da01a80cac25
bdb073ed42501719110c8239a722a03b3bdfa7a701e869762d958ca27f0abb46
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 21:33:41 GMT
date: Fri, 01 Dec 2023 21:33:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playsgift.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 173985
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
IP 216.58.207.227:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14964, version 1.0\012- data
Hash d6d554615ae9902f2173476e77d079fa
b5064acc8ba1c63153bfab733b915092e2b62cb6
4a0ce7a531a41b6fb56b8027541951ffe1ad67ab9e49a12ee4816247178d5bca
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playsgift.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:32:51 GMT
expires: Thu, 28 Nov 2024 18:32:51 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:07 GMT
content-type: font/woff2
age: 183650
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
IP 216.58.207.227:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14964, version 1.0\012- data
Hash d6d554615ae9902f2173476e77d079fa
b5064acc8ba1c63153bfab733b915092e2b62cb6
4a0ce7a531a41b6fb56b8027541951ffe1ad67ab9e49a12ee4816247178d5bca
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://playsgift.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:32:51 GMT
expires: Thu, 28 Nov 2024 18:32:51 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:07 GMT
content-type: font/woff2
age: 183650
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
l.top4top.io/p_2640dox6s1.jpg
65.21.235.194200 OK 94 kB URL GET HTTP/2 l.top4top.io/p_2640dox6s1.jpg
IP 65.21.235.194:443
ASN #24940 Hetzner Online GmbH
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerLet's Encrypt
Subject*.top4top.co
Fingerprint98:C6:A8:2C:16:D5:04:38:85:B0:AF:12:09:89:3E:5D:88:01:7D:F5
ValidityWed, 01 Nov 2023 00:07:36 GMT - Tue, 30 Jan 2024 00:07:35 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 724x1280, components 3\012- data
Hash d0b8ddda1d4838cb0729f2718464bcb3
42bbd6e12fc5e97129219aa185de16785ab12207
57ce9fadc771d74b953d8389b603b1f0025abd20cd9e394e22c0f4ec90f888d4
GET /p_2640dox6s1.jpg HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: image/jpeg
content-length: 93905
set-cookie: klj_40d147_downloads=w0ivb; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 02 Dec 2023 21:10:21 GMT
last-modified: Sat, 25 Mar 2023 20:14:12 GMT
content-disposition: inline; filename="2640dox6s1.jpg"
etag: "641f5614-16ed1"
expires: Fri, 01 Dec 2023 23:33:41 GMT
cache-control: max-age=7200
x-file-id: x53772167x
accept-ranges: bytes
X-Firefox-Spdy: h2
d2yc1amd5aqnhl.cloudfront.net/public/external/css_frontXF.css
54.230.241.115200 OK 6.1 kB URL GET HTTP/2 d2yc1amd5aqnhl.cloudfront.net/public/external/css_frontXF.css
IP 54.230.241.115:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 8cf8da7dc6b5d43ae6872b4fe5564c38
cc3c14ce8bccf427b4a777449876eb722381cb18
60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f
GET /public/external/css_frontXF.css HTTP/1.1
Host: d2yc1amd5aqnhl.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 6134
date: Fri, 01 Dec 2023 21:33:41 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Thu, 17 Aug 2023 03:23:55 GMT
etag: "17f6-60315f12e3b62"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fG52w5zzf90wCeGYUVK7xpYKfUjL0r2Y4dxAIhaAlEsJcUML2Tjsug==
X-Firefox-Spdy: h2
playsgift.com/sX/?ref=802
104.21.24.60200 OK 7.1 kB URL User Request GET HTTP/2 playsgift.com/sX/?ref=802
IP 104.21.24.60:443
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7405), with no line terminators
Hash f04bd3c7291879b297e2047727b9307b
8bc6407fdccc4ec8e8b5ecd1b90e56b045bbbdca
b4e7f0fd700da60e898ad64b64e7b483001045a6763c0d1b53345c35a3d831e8
GET /sX/?ref=802 HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: text/html; charset=UTF-8
content-security-policy: upgrade-insecure-requests;
vary: Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
x-content-security-policy: allow 'self';
x-xss-protection: 1; mode=block
x-beget-proxy: cdproxy
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=onCG7H72df8XyjD0Ad6kaF%2FG6qoXUnRhPVhGT6De7Bq0mK8VcmOrwdJTfukeo7umDTYplA5T6h%2FT57Af0iIs%2B6ukGodswkSJMEQCiG7JHjTE03%2FOHjgS1GXUPagPRwgX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ee732818fb5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
playsgift.com/sX/js/popup.js
104.21.24.60200 OK 773 B URL GET HTTP/3 playsgift.com/sX/js/popup.js
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type ASCII text, with very long lines (792), with no line terminators
Hash 4a1040a07267f9d2d00029be693dcdb6
5b5f40ad3b12a72ddead3c0f81c4b83137692642
42adedb7af830b505bbcab2f7a7d322466ea671f3da2182b6e3f33ae1b503449
GET /sX/js/popup.js HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: application/x-javascript
cache-control: max-age=2678400
cf-bgj: minify
cf-polished: origSize=932
etag: W/"65662946-3a4"
expires: Thu, 07 Dec 2023 06:11:54 GMT
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
vary: Accept-Encoding
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZNPjf10G8Zjitn3Bagq0CCK%2Bj8KygSkWw8%2F1ihw5Hy0B%2B6f8ieUassstxdV63fDHPIiLZSxrwUbaSLExfPGJ3LhtyM7auE7OX0%2Ff4SdGYsQS3l1%2Bj2as6cU64H5dtIFM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b293156a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
104.18.10.207200 OK 31 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.18.10.207:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 840596
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ee732b7d6a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
playsgift.com/sX/CSS/Style.css
104.21.24.60200 OK 8.1 kB URL GET HTTP/3 playsgift.com/sX/CSS/Style.css
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type ASCII text, with very long lines (8069), with no line terminators
Hash d3c29397eb3d7f7dc533985903e8d310
c19d165a48df6d84546ca44a9100252a2c38efd7
47ebd2ea9b09a6e65c7989ab1d1c89700b1b795e9a010f2c764e8e11576f9aa1
GET /sX/CSS/Style.css HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: text/css
cache-control: max-age=2678400
cf-bgj: minify
cf-polished: origSize=10759
etag: W/"65662946-2a07"
expires: Thu, 07 Dec 2023 06:11:54 GMT
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
vary: Accept-Encoding
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0MxgpcD5lwI%2BZY%2BBKKjkFkG632zDgAYu0x4WUcAtwRYid9iKlUeXxTLDEEq0aedzug0oqdgjmp%2B9AoYVWvWAk56xMp47f%2Bz%2B2CfNkiZbfEDSFmVm9sCelTyR6GIILIb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b091256a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
playsgift.com/favicon.ico
104.21.24.60302 Found 2.5 kB URL GET HTTP/3 playsgift.com/favicon.ico
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 01 Dec 2023 21:33:42 GMT
content-type: text/html; charset=iso-8859-1
location: https://playsgift.com
content-security-policy: upgrade-insecure-requests;
x-beget-proxy: cdproxy
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVo%2BcxABAVeoIisEXgi1tyW0uy8KG1mY7E3NLixfljzVoWppP7dx5x6hqTYRqHp86%2FKCNVdiXZOqSHdxJ4UZPtCN5FKVwIwIBUnV2JV8kd0ovHpPiq3%2Bh7fmWFlaf2Rq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee7334c9ea56a9-OSL
alt-svc: h3=":443"; ma=86400
playsgift.com/
104.21.24.60200 OK 2.5 kB IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2582), with no line terminators
Hash 51bbd1e93fe5f4627f312e8a9b4cf7d6
1543fb6fd1f7eb84c34fab578ef242f50597e7b0
7249a3ffa6681789b555df7186e58d4497646df7a3d899004fe1b23e65034c05
GET / HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playsgift.com/sX/?ref=802
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:42 GMT
content-type: text/html; charset=UTF-8
content-security-policy: upgrade-insecure-requests;
vary: Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
x-content-security-policy: allow 'self';
x-xss-protection: 1; mode=block
x-beget-proxy: cdproxy
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DqDO1kBtbHZnDgNUQ0fKtpgIBzCh6tUJqd5mcWUiY7HXTNgLbig5%2Ff6JuN24BsWHCp67dFxYjU3hGRuWGKPE%2BkAjee7pRlFprRWqsv385kNf6bV1nFPYnkz0yW6HmFip"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ee7335db8b56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d2yc1amd5aqnhl.cloudfront.net/public/external/v2/htmlxf.3692047.1d751.0.js
54.230.241.115200 OK 17 kB URL GET HTTP/2 d2yc1amd5aqnhl.cloudfront.net/public/external/v2/htmlxf.3692047.1d751.0.js
IP 54.230.241.115:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (15993), with CRLF line terminators
Hash 99b735f32742a884686b7085356c4a38
808f2ff0f27e1b751e6274b8e061d1c874ebb315
4fcb3d6e0ac42fb9c097fe1ad059cb971d6b8b345e103660cef7c0dccc851635
GET /public/external/v2/htmlxf.3692047.1d751.0.js HTTP/1.1
Host: d2yc1amd5aqnhl.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 01 Dec 2023 21:33:42 GMT
server: Apache/2.4.48 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l5-9R1L-9R1ANsJqpUJHuXxRkUy2LLL_UJAc4jwcaF7T6QNDx4ZBfQ==
X-Firefox-Spdy: h2
104.21.24.60301 Moved Permanently 7.1 kB URL User Request GET HTTP/2 IP 104.21.24.60:443
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sX?ref=802 HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: text/html; charset=iso-8859-1
location: http://playsgift.com/sX/?ref=802
content-security-policy: upgrade-insecure-requests;
x-beget-proxy: cdproxy
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xosCps0VUWnsBxjO4cMtgg212WTvuXRycITY70wRyADFyNpt4r6DLz3YUqXEsUXaEt%2FMOCkRJAalA6%2FBEmBMOx0wKkJydJ1D%2FPLL0G0Z55RP8UIbAAGu617D97My9pP5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732708485691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
playsgift.com/sX/js/click.js
104.21.24.60200 OK 82 kB URL GET HTTP/3 playsgift.com/sX/js/click.js
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 98f2840efdd2f2e907a2d2791ad0ca86
7f50e92ba22b8f9833923de67e95f9610e18de49
805a205657236d0e052cbdda3546149616b47b645e337da8161bc243b95c6fb1
GET /sX/js/click.js HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:41 GMT
content-type: application/x-javascript
cache-control: max-age=2678400
cf-bgj: minify
etag: W/"65662946-13e36"
expires: Thu, 07 Dec 2023 06:11:54 GMT
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
vary: Accept-Encoding
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iv0pyIbYUrJEmHad%2BrwqTnx4sGRL1YSDs1Kih8kbGm6v68A8FKkhUy3e%2FORICKFc6kpmpK4OajZ8i9a4mFEShsy1ZbYjr5c06GNq%2FC%2BMSKThu1bFy47ttPp26k0sKlQV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b293256a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
playsgift.com/sX/CSS/tw.css
104.21.24.60200 OK 2.0 kB URL GET HTTP/3 playsgift.com/sX/CSS/tw.css
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type ASCII text, with very long lines (2019), with no line terminators
Hash 6b93d1c6f2829ac3c9e864fa9bbb2d67
7953b34f9c53c3442207759b34d7f286733fd860
0010af8087e41f82e3bc564cf85f48fab7899a2184d1ce811f5aff22e1878194
GET /sX/CSS/tw.css HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: text/css
cache-control: max-age=2678400
cf-bgj: minify
cf-polished: origSize=2862
etag: W/"65662946-b2e"
expires: Thu, 07 Dec 2023 06:11:54 GMT
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
vary: Accept-Encoding
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W985pUwZLcHccpvXLR5gVfZbPFCxc7uJDFIWFb%2B3UAg0%2FeMdqHEeIQVUUVKcOfOeSnvRlH9ZmDAZz%2Bp63hqEUgdMyHYKgmYT%2BwYUPCbSBaPOO1ynDfY3FDmjnl2VGj5E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b090f56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d115fsoldgezur.cloudfront.net/11b1536.js
54.230.241.83200 OK 27 kB URL GET HTTP/2 d115fsoldgezur.cloudfront.net/11b1536.js
IP 54.230.241.83:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (1637), with CRLF line terminators
Hash 1d4bf449a445ba3f51ddbb265bb20a66
776c9032ba78f5e4e5bee3c84ef435f79d9db4c6
f2c83aa51a9a14329803e75c79a3ef8727216c8a7f4614db3258237442b95db2
GET /11b1536.js HTTP/1.1
Host: d115fsoldgezur.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 04 Oct 2023 02:19:24 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 01 Dec 2023 21:33:41 GMT
etag: W/"1d4bf449a445ba3f51ddbb265bb20a66"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GF8G76Czg3uP5fBHChW9ZkngdPfogLpJ1XPvOVRVXpMFWMSe4odOCw==
age: 21
X-Firefox-Spdy: h2
playsgift.com/sX/CSS/fc.css
104.21.24.60200 OK 2.9 kB URL GET HTTP/3 playsgift.com/sX/CSS/fc.css
IP 104.21.24.60:443
Requested by https://playsgift.com/sX/?ref=802
Certificate IssuerGoogle Trust Services LLC
Subjectplaysgift.com
Fingerprint34:8F:70:5E:8C:32:42:FB:8A:EE:B4:B2:32:9D:F7:A2:51:5F:8A:FE
ValidityWed, 04 Oct 2023 20:33:34 GMT - Tue, 02 Jan 2024 20:33:33 GMT
File type ASCII text, with very long lines (2877), with no line terminators
Hash 8fdca8358bc407350a48d665148894d0
d21233aa21bf2e3bf051e91b510e368385ce7317
27eaaf977ce5402e34c96e4d25fc92b3565dbd42f2c3c045f280ff1f77f459bb
GET /sX/CSS/fc.css HTTP/1.1
Host: playsgift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://playsgift.com/sX/?ref=802
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 21:33:40 GMT
content-type: text/css
cache-control: max-age=2678400
cf-bgj: minify
cf-polished: origSize=2999
etag: W/"65662946-bb7"
expires: Thu, 07 Dec 2023 06:11:54 GMT
last-modified: Tue, 28 Nov 2023 17:54:14 GMT
vary: Accept-Encoding
x-beget-proxy: cdproxy
cf-cache-status: HIT
age: 141706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=apLxbDZu%2B1Q1017K6de1Ea4NvvE06SLEqXAKLMVkJfJawfUT6bvEhECgE7CEkyceQmpK%2F4ZFL5jA2PSgzg8XtZnVwv4kLky9y4FARmswO%2FHEqwfKzkWI4%2BpAk59piu3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82ee732b090e56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400