https://www.dndbeyond.com/campaigns/join/65797093920489024

Scan ID:: ad1bdef8-c552-4af5-927b-21f2ad1062a7Finished
Submitted URL:: https://www.dndbeyond.com/campaigns/join/65797093920489024
Report Finished:: Apr 5, 2025, 20:36:58Public

HTTP transactions · 14 detected

A list of all the HTTP requests and responses made by the resource during the current session


GETh2	403	Primary Request65797093920489024Downloadhttps://www.dndbeyond.com/campaigns/join	Documenttext/html	3.35kB3.74kB	151.101.193.91AS54113 (US)
General Full URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.193.91AS54113 (US) Server Software Varnish Resource Hash fc25afe2652f5bb2a6e270492d94457f7b21a2609d09a78f9be7f9ca6b46cef2 Security Headers strict-transport-security max-age=300 Request Headers Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority www.dndbeyond.com :method GET :path /campaigns/join/65797093920489024 :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 priority u=0, i sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers accept-ranges bytes content-length 3433 content-type text/html date Sat, 05 Apr 2025 20:37:05 GMT retry-after 0 server Varnish strict-transport-security max-age=300 vary Origin, Origin, Access-Control-Allow-Origin, Cookie via 1.1 varnish x-cache MISS x-cache-hits 0 x-served-by cache-mad2200131-MAD
GETh2	200	csshttps://fonts.googleapis.com	StyleSheettext/css	5.83kB1.99kB	142.250.176.202AS15169 (US)
General Full URL https://fonts.googleapis.com/css?family=Open+Sans:300 Requested by URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Host www.dndbeyond.com Type parser Protocol h2 Security TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 142.250.176.202AS15169 (US) Server Software ESF Resource Hash 7f6ebd5e622c2087040ad3d21a8f46e3decab9872a0b0c10005362e8330ef915 Security Headers strict-transport-security max-age=31536000 x-content-type-options nosniff cross-origin-resource-policy cross-origin x-xss-protection 0 cross-origin-opener-policy same-origin-allow-popups x-frame-options SAMEORIGIN Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority fonts.googleapis.com :method GET :path /css?family=Open+Sans:300 :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 priority u=0 referer https://www.dndbeyond.com/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers strict-transport-security max-age=31536000 date Sat, 05 Apr 2025 20:37:05 GMT content-encoding gzip x-content-type-options nosniff cross-origin-resource-policy cross-origin alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 x-xss-protection 0 last-modified Sat, 05 Apr 2025 18:53:45 GMT server ESF cross-origin-opener-policy same-origin-allow-popups vary Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site x-frame-options SAMEORIGIN content-type text/css; charset=utf-8 access-control-allow-origin * cache-control private, max-age=86400, stale-while-revalidate=604800 timing-allow-origin * link <https://fonts.gstatic.com>; rel=preconnect; crossorigin expires Sat, 05 Apr 2025 20:37:05 GMT
GETh2	200	px.csshttps://media-waterdeep.cursecdn.com/attachments	StyleSheettext/css	2.09kB947B	151.101.192.194AS54113 (US)
General Full URL https://media-waterdeep.cursecdn.com/attachments/px.css Requested by URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Host www.dndbeyond.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.192.194AS54113 (US) Server Software AmazonS3 Resource Hash 94b521529273cd70983566b25500dea420b6b45cfbd379ddc15ca77a5e629c01 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority media-waterdeep.cursecdn.com :method GET :path /attachments/px.css :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 priority u=0 referer https://www.dndbeyond.com/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Sat, 05 Apr 2025 20:37:05 GMT content-encoding gzip via 1.1 varnish, 1.1 varnish age 2253711 x-cache HIT, HIT content-length 653 x-served-by cache-iad-kjyo7100164-IAD, cache-mad2200120-MAD last-modified Thu, 10 Oct 2019 19:07:22 GMT server AmazonS3 x-timer S1743885426.856265,VS0,VE1 etag "194302817e8fb2a00c4e577fe83f468c" vary Accept-Encoding content-type text/css cache-control public, max-age=31536000 accept-ranges bytes x-cache-hits 10963, 0
GETh2	200	dnd-beyond-logo-black.svghttps://www.dndbeyond.com/content/skins/Waterdeep/images	Imageimage/svg+xml	6.26kB3.15kB	151.101.193.91AS54113 (US)
General Full URL https://www.dndbeyond.com/content/skins/Waterdeep/images/dnd-beyond-logo-black.svg Requested by URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Host www.dndbeyond.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.193.91AS54113 (US) Server Software AmazonS3 Resource Hash cfee9fc8797fa2458b16cc02a1c7f843de84155c65eac3b2a36a233f86ebedfb Security Headers strict-transport-security max-age=300 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/campaigns/join/65797093920489024 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Response Headers date Sat, 05 Apr 2025 20:37:06 GMT content-encoding gzip via 1.1 varnish strict-transport-security max-age=300 age 0 x-cache MISS fastly-restarts 1 content-length 2876 x-served-by cache-mad2200131-MAD last-modified Fri, 17 Jan 2020 23:27:51 GMT server AmazonS3 x-timer S1743885426.754242,VS0,VE452 etag "80cd1ae433136f714a0a1b3101993c6b" vary Accept-Encoding,Origin, Origin, Access-Control-Allow-Origin content-type image/svg+xml cache-control public, max-age=432000 accept-ranges bytes x-cache-hits 0
GETh2	200	robot.pnghttps://media-waterdeep.cursecdn.com/attachments/6/770	Imageimage/png	801.92kB802.54kB	151.101.192.194AS54113 (US)
General Full URL https://media-waterdeep.cursecdn.com/attachments/6/770/robot.png Requested by URL https://media-waterdeep.cursecdn.com/attachments/px.css Host media-waterdeep.cursecdn.com Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.192.194AS54113 (US) Server Software AmazonS3 Resource Hash 6561491486751e733e9bc342fd3226b25d0c4804fa42cc3a7c37a0575d7ab995 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://media-waterdeep.cursecdn.com/attachments/px.css User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Response Headers x-served-by cache-iad-kcgs7200108-IAD, cache-mad2200120-MAD date Sat, 05 Apr 2025 20:37:05 GMT via 1.1 varnish, 1.1 varnish last-modified Thu, 10 Oct 2019 18:05:42 GMT server AmazonS3 age 2270967 x-timer S1743885426.905910,VS0,VE1 etag "0cdf78650416d351e7f048d1f8593f33" x-cache HIT, HIT content-type image/png cache-control public, max-age=31536000 accept-ranges bytes content-length 821169 x-cache-hits 13799, 0
GETh2	503	captcha.jshttps://www.dndbeyond.com/cNj12cyX/captcha	Scripttext/html	0B-1B	151.101.193.91AS54113 (US)
General Full URL https://www.dndbeyond.com/cNj12cyX/captcha/captcha.js?a=c&u=bcc51ea7-125d-11f0-9912-527a2593a522&v=&m=0 Requested by URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Host www.dndbeyond.com Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.193.91AS54113 (US) Server Software Varnish Security Headers strict-transport-security max-age=300 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/campaigns/join/65797093920489024 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.dndbeyond.com :method GET :path /cNj12cyX/captcha/captcha.js?a=c&u=bcc51ea7-125d-11f0-9912-527a2593a522&v=&m=0 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 cookie _pxhd=oNrdckn6-9RYRLC/kdxrDkHqexIlBKMs7QpBjzaXnH5NAtRIz9kNnBgK/YpbTI-mnTnOryh0wfFSAm8gjUacdg==:4hvcC1ZKbFR6kiNWFjbQ0TtJcPUqlG20WQ/IGmqav15JnyrumZqX0RMmJaTya9me8n2yM7OHiTZoDgLWhMDB2UITXTDnM3Dt4zJcRUn3VPw= referer https://www.dndbeyond.com/campaigns/join/65797093920489024 sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers x-served-by cache-mad2200131-MAD date Sat, 05 Apr 2025 20:37:05 GMT via 1.1 varnish strict-transport-security max-age=300 server Varnish vary Origin, Origin, Access-Control-Allow-Origin, Cookie x-cache MISS content-type text/html; charset=utf-8 accept-ranges bytes content-length 519 retry-after 0 x-cache-hits 0
GETh2	200	memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2https://fonts.gstatic.com/s/opensans/v40	Fontfont/woff2	18.27kB18.79kB	142.250.80.67AS15169 (US)
General Full URL https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 Requested by URL https://fonts.googleapis.com/css?family=Open+Sans:300 Host fonts.googleapis.com Type parser Protocol h2 Security TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 142.250.80.67AS15169 (US) Server Software sffe Security Headers x-content-type-options nosniff cross-origin-resource-policy cross-origin x-xss-protection 0 cross-origin-opener-policy same-origin; report-to="apps-themes" Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://fonts.googleapis.com/ Origin https://www.dndbeyond.com User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority fonts.gstatic.com :method GET :path /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 origin https://www.dndbeyond.com priority u=0 referer https://fonts.googleapis.com/ sec-fetch-dest font sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Sat, 05 Apr 2025 02:05:38 GMT x-content-type-options nosniff age 66687 content-security-policy-report-only require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy cross-origin alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 content-length 18704 x-xss-protection 0 last-modified Thu, 14 Dec 2023 02:00:38 GMT server sffe cross-origin-opener-policy same-origin; report-to="apps-themes" report-to {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} content-type font/woff2 access-control-allow-origin * cache-control public, max-age=31536000 accept-ranges bytes timing-allow-origin * expires Sun, 05 Apr 2026 02:05:38 GMT
GETh2	200	captcha.jsDownloadhttps://captcha.px-cdn.net/PXcNj12cyX	Scriptapplication/javascript	521.15kB522.11kB	151.101.65.40AS54113 (US)
General Full URL https://captcha.px-cdn.net/PXcNj12cyX/captcha.js?a=c&u=bcc51ea7-125d-11f0-9912-527a2593a522&v=&m=0 Requested by URL https://www.dndbeyond.com/campaigns/join/65797093920489024 Host www.dndbeyond.com Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.65.40AS54113 (US) Resource Hash fb02c24eb7f4745654d5834f27ef1b5339516db45f5b853b850afa1843440c60 Security Headers content-security-policy default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests strict-transport-security max-age=15552000; includeSubDomains x-content-type-options nosniff x-permitted-cross-domain-policies none x-xss-protection 0 referrer-policy no-referrer x-frame-options SAMEORIGIN Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority captcha.px-cdn.net :method GET :path /PXcNj12cyX/captcha.js?a=c&u=bcc51ea7-125d-11f0-9912-527a2593a522&v=&m=0 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 referer https://www.dndbeyond.com/ sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers content-security-policy default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests strict-transport-security max-age=15552000; includeSubDomains x-content-type-options nosniff date Sat, 05 Apr 2025 20:37:06 GMT via 1.1 varnish x-permitted-cross-domain-policies none age 0 x-dns-prefetch-control off x-cache MISS content-length 533656 x-xss-protection 0 x-served-by cache-mad2200147-MAD referrer-policy no-referrer x-timer S1743885426.015350,VS0,VE907 etag W/"82498-kN19p90LoqhQ4puIn5M6586ITuk" x-download-options noopen x-frame-options SAMEORIGIN active-cdn fastly content-type application/javascript; charset=utf-8 access-control-allow-origin * origin-agent-cluster ?1 access-control-expose-headers active-cdn,x-served-by cache-control public, max-age=600 accept-ranges bytes x-cache-hits 0
GETh2	200	main.min.jsDownloadhttps://client.px-cloud.net/PXcNj12cyX	Scriptapplication/javascript	167.2kB69.8kB	151.101.1.40AS54113 (US)
General Full URL https://client.px-cloud.net/PXcNj12cyX/main.min.js Requested by URL https://captcha.px-cdn.net/PXcNj12cyX/captcha.js?a=c&u=bcc51ea7-125d-11f0-9912-527a2593a522&v=&m=0 Host captcha.px-cdn.net Type script Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 151.101.1.40AS54113 (US) Server Software UploadServer Resource Hash f22af390e82dd6552fa04e8fc8b27ba0e69b160a26e903530533172ffc539706 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Response Headers x-cache-hits 0 date Sat, 05 Apr 2025 20:37:07 GMT content-encoding gzip via 1.1 varnish age 0 x-cache HIT content-length 71053 x-served-by cache-toj-leto2350032-TOJ last-modified Sat, 05 Apr 2025 20:02:40 GMT server UploadServer x-timer S1743885427.429763,VS0,VE103 etag "7145ae69350143a317d461c512c84ed9" active-cdn Fastly-RG vary Accept-Encoding content-type application/javascript; charset=utf-8 access-control-allow-origin * access-control-expose-headers active-cdn,x-served-by cache-control max-age=600 x-goog-stored-content-length 71053 accept-ranges bytes expires Sat, 05 Apr 2025 20:19:52 GMT
GEThttp/1.1	200OK	nsDownloadhttps://tzm.px-cloud.net	XHRtext/html	350B350B	34.36.73.246AS396982 (US)
General Full URL https://tzm.px-cloud.net/ns?c=bcc51ea7-125d-11f0-9912-527a2593a522 Requested by URL https://client.px-cloud.net/PXcNj12cyX/main.min.js Host client.px-cloud.net Type script Protocol http/1.1 Security TLS 1.2, X25519, AES_128_GCM Server 34.36.73.246AS396982 (US) Resource Hash a825b5b2c72323c3c428514cc8d931c678e0a0d1d984a2f5dab669ccf54f8f14 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.dndbeyond.com/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Accept / Accept-Encoding gzip, deflate, br, zstd Accept-Language en-US,en;q=0.9 Connection keep-alive Host tzm.px-cloud.net Origin https://www.dndbeyond.com Sec-Fetch-Dest empty Sec-Fetch-Mode cors Sec-Fetch-Site cross-site cf-biso-devtools 1 cf-biso-request-id abfe35a3-ba77-4c1e-b65a-e057da0377c0 Response Headers Access-Control-Allow-Origin * Date Sat, 05 Apr 2025 20:37:07 GMT Content-Length 350 Content-Type text/html

Page history · 1 entry found

HTTP, JavaScript or Meta tag redirects

https://www.dndbeyond.com/campaigns/join/65797093920489024403

Redirect chains · 0 found

Redirects that were detected on the HTTP transactions

DNS records · 2 found

DNS records provide information about a domain including what IP address it's associated with

Type	Name	Content	DNSSEC
CNAME	www.dndbeyond.com	dndbeyond.map.fastly.net.	Disabled
CNAME	www.dndbeyond.com	dndbeyond.map.fastly.net.	Disabled