fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863618
104.26.5.26301 Moved Permanently 167 B URL GET HTTP/2 fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863618
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863618 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html
content-length: 167
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
cache-control: max-age=3600
expires: Wed, 24 Apr 2024 18:47:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iWJSVW8YBMJIVndgA%2FKMtOuA0O9dU%2Bq1Fjtbij%2F3HniNDrSqecNB%2Bofl5OW%2Fp%2FsKuFxwpSpBf1kyT3pHoi0mieXWb1siAoOhWGesr1AhkPicACY5skBmfLGp9fiqF8c9mxayzm58"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dac8a7130-OSL
X-Firefox-Spdy: h2
pwrpa.cc/js/ads.js?ver=6.6.2
188.114.97.1200 OK 289 B URL GET HTTP/3 pwrpa.cc/js/ads.js?ver=6.6.2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type ASCII text, with no line terminators
Hash ad977769fb3d4563273839c05f398a5f
add7b365d2540cc50768b85ec831702b65d3f3fe
35cfcd217a99f4a70662aeee61cd31ca9c8c691ca3771dcb8f7170051cc05e5c
GET /js/ads.js?ver=6.6.2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=218
alt-svc: h3=":443"; ma=86400
expires: Mon, 20 May 2024 16:35:20 GMT
last-modified: Mon, 19 Jun 2023 15:53:00 GMT
strict-transport-security: max-age=63072000; includeSubDomains
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 349943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3MxZaxXj76oNVgEMu0sEK56WxM%2Bf%2FI8E4yDooFvOlzLvc3BeoYg2B1zR%2B3rJujg7FJy4SBIZd%2Fv8g%2Bne%2B3QL%2BzmWF0iT9Fnbj2uLWPWY7668yrzKPh29y6M3LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8d5b7e0afe-OSL
content-encoding: br
188.114.97.1200 OK 6.4 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (2379), with CRLF, LF line terminators
Hash 435190e996262a695f6eedb374e20279
bbe9a323ebb0ce459779cac256e286f306ffe714
8b1786ac2f8cb560e390b8a7646e4b28eb8d38686fcbcd983c66c890879ba20d
GET /UzxN HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=UTF-8
cf-ray: 8797eb88dd2d56c9-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
pragma: no-cache
set-cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; path=/; HttpOnly; secure
refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; expires=Wed, 24-Apr-2024 17:52:43 GMT; Max-Age=300; path=/; HttpOnly; secure
csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383; path=/; HttpOnly; secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6F%2BAM4cfeSuG3cmCBJjZdyoyvW6BwRwh542ThXkVfFKzUui%2BGMStq6JCREYUSudectIZYH2A7pjPgynzFj6FJcTRfPqPAed9nlLVzFgp%2F9AKoRZ4m4KJP%2BUMeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863625
104.26.5.26301 Moved Permanently 167 B URL GET HTTP/2 fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863625
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863625 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html
content-length: 167
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
cache-control: max-age=3600
expires: Wed, 24 Apr 2024 18:47:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QfU4kO7yu2PwD13zbRngyXYL19M9qFDreaiiiPY05vpbDAUkFL06yK20rYy5etFQwl6wrRUyZ6Zsvqw72RBWYs3%2BhvR1m9VR1ISrOAtT1AA84cXqhCu%2BtGGepb9YdQk9cU0LLHmK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dbc977130-OSL
X-Firefox-Spdy: h2
fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863627
104.26.5.26301 Moved Permanently 167 B URL GET HTTP/2 fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863627
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863627 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html
content-length: 167
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
cache-control: max-age=3600
expires: Wed, 24 Apr 2024 18:47:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BXsc99KwIuJ40oJoZ4sjiGKGH40v0gtS4wIdu1n9lvrD2IdysrWOE77sNWmZ62CnHwFKSvjSNW7ZQW%2FTxp7AOkktUPDDrqkUpwdR1mC26sVWe21w2YxhuYo3mnhjgRk0AB2VYOt%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dbc9f7130-OSL
X-Firefox-Spdy: h2
pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/700/normal.woff2
188.114.97.1200 OK 23 kB URL GET HTTP/3 pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/700/normal.woff2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /cf-fonts/s/lato/5.0.18/latin/700/normal.woff2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-length: 23040
cf-cache-status: HIT
cache-control: public, max-age=31536000, immutable
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2F4xI8DZAT1B7H8A9ovTExo5s7%2B5uwMeh4g48SUqfs1EDOsCZnFRWu0v8jzvYpNkMFbxGmX%2FjOwbolblooKuWnMiN6Ru4YFOXIujdpUNc4%2BAKzPrrI3b5dZnoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8ddc350afe-OSL
alt-svc: h3=":443"; ma=86400
pwrpa.cc/cl_theme/build/fonts/fontawesome-webfont.woff2
188.114.97.1200 OK 77 kB URL GET HTTP/3 pwrpa.cc/cl_theme/build/fonts/fontawesome-webfont.woff2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /cl_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/cl_theme/build/css/link.css?ver=6.6.2
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: font/woff2
content-length: 77160
last-modified: Mon, 19 Jun 2023 14:53:00 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cache-control: max-age=14400
cf-cache-status: HIT
age: 1098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dq89T6DCqCB8PkZqNYnis20gfL3xNx9ISOupRG4SlXt4RNidDJQaQH4advNRNCdvd9yUT%2BCh81V9xQe8OjsQ8jqmescDgv%2BUB76RAzi%2Fd4M7AGd48%2BwlifkhVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8ddc3a0afe-OSL
pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/400/normal.woff2
188.114.97.1200 OK 24 kB URL GET HTTP/3 pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/400/normal.woff2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /cf-fonts/s/lato/5.0.18/latin/400/normal.woff2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-length: 23580
cf-cache-status: HIT
cache-control: public, max-age=31536000, immutable
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m4fE8ZXivMYnoY9mZHwfhDsRAmcc3Xm999ITrTrOrDK72%2Bpb4wus4SFeKO%2Bov%2BpvcqyvW2xxp4D1RI1Q9tazMAe6bCqFlICTfPGxyFWcFjSu6MISSNpYnuggbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8ddc300afe-OSL
alt-svc: h3=":443"; ma=86400
pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/900/normal.woff2
188.114.97.1200 OK 22 kB URL GET HTTP/3 pwrpa.cc/cf-fonts/s/lato/5.0.18/latin/900/normal.woff2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /cf-fonts/s/lato/5.0.18/latin/900/normal.woff2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-length: 22504
cf-cache-status: HIT
cache-control: public, max-age=31536000, immutable
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UuSCVxiuK1ND2Xb4EQRh9OHTOIfYpxVbv1Jmhz4D4D9rXS9hSQRUkFHASw6EfFriNtaLHT5jhyy3IGB4PyOA9%2Fb%2BwNC12RvTJIPrQwn7fB1BOlwRiyKQRFOJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dec3e0afe-OSL
alt-svc: h3=":443"; ma=86400
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
104.26.5.26302 Found 106 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 106 kB (105721 bytes)
Hash 6ba548d36c722f88bb03b08b80ef1673
61c1d50af608701a8e3aa9be7c563682075fa322
a2b3da2b212fa01a3bf035fccbdf93901c628ad0d1d4c99cf9c111d38983e8e2
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qUGLOFzeSFiBvcGZQO56pNTLTw%2F0jTIc6Og1qxJLrzs3fn01Fa%2BqfmCbv7jJYEjcXLsDC8CrId7TwpwMAkAnW%2BVoQRm0lXfnUaeziWRXNz%2Fza%2B%2FFtgj2UYxLv7WqFCM2YA%2BrB8E5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8e4da87130-OSL
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
104.26.5.26302 Found 768 B URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Hash dd4c04a8944f0a1fa41592d4748ceb24
bd66603a065c5b265471ee60ebe375ddb2fc9037
998a30609697b677c6665c5d9ce96144c440034de1055a2cd6305e90f8eb97ad
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkkhQldCMOP1ZkG1oCtxiKhjFk0e6vkha8vHxSvSeWUx5Osh7izEKjK5g2scfxgRnzsU7gftW8raqcd47Nd0y60uyh79hbX8F28rbZCJEiWm3AFbRWC0b9BI5e%2BZLg415cl6EKEQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8e4da47130-OSL
X-Firefox-Spdy: h2
grantedpigsunborn.com/04/e6/aa/04e6aaf7cf19824c28b9aefc25a57a4d.js
172.240.108.76200 OK 17 kB URL GET HTTP/1.1 grantedpigsunborn.com/04/e6/aa/04e6aaf7cf19824c28b9aefc25a57a4d.js
IP 172.240.108.76:443
Certificate IssuerLet's Encrypt
Subject*.grantedpigsunborn.com
Fingerprint5D:08:28:F0:75:88:0C:EF:AF:1C:44:FB:89:78:11:6F:B4:55:B5:4E
ValiditySun, 07 Apr 2024 07:08:43 GMT - Sat, 06 Jul 2024 07:08:42 GMT
File type JavaScript source, ASCII text, with very long lines (53771), with no line terminators
Hash 4a0a7c4b0f6412e1fa6dfa8dd3e6ff30
da50955487fa7d7b285f0f062435e5a7e9eaf933
d7c3e0aef31cb6666963f4e69959e551e0afa1919fc98d2015490c26872e0cb3
GET /04/e6/aa/04e6aaf7cf19824c28b9aefc25a57a4d.js HTTP/1.1
Host: grantedpigsunborn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 610f2dde794fb1e0be721c1d2f05609e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cmp.netpub.media/init.js?v=1
104.26.5.26200 OK 911 B URL GET HTTP/2 cmp.netpub.media/init.js?v=1
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type ASCII text, with CRLF line terminators
Hash 720836441c5012fb61927e69858c78c8
d14f75a95996684f94501ef0b0dfb993fba6f38b
be2a20fa9de8659f1d3f565699c13a51a9cae34c4ba3ce47ef0319398b265017
GET /init.js?v=1 HTTP/1.1
Host: cmp.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 16:43:37 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0GQhTG4S17ABSmoxJHaExOz6a69JEEumpkmVSd6sz4y62AEFaHBm7DumcqLLh%2F%2FgB4pvwfXb%2FYsizEzkF282NphDJ3zMCOeZFFSekvUOXPU9wm8AvK7mRcAybAfSsIC8JBc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb9119e47130-OSL
content-encoding: br
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
104.26.9.169200 OK 580 B URL GET HTTP/1.1 script.4dex.io/localstore.js
IP 104.26.9.169:443
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
FingerprintAB:9B:A2:70:ED:27:23:EF:84:14:22:FF:67:9F:5D:50:06:2D:04:28
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1371)
Hash 00a8e13a83b2bbab51af8e55f52be363
57340eb5c07e50d96f4a04bd4c220f0f24cec649
3aec57ffa5c31e185202ddaa3b5b9d9872d4504f4546ab4eea1298baaf3c7cc7
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"00a8e13a83b2bbab51af8e55f52be363"
Last-Modified: Thu, 18 Apr 2024 08:50:22 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 550247
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4zvc839Zd9GB3jt0jlUQfghZuvXSrJIZeD3rWRNZoAdFDz%2FjuF1Nuc9Yka%2B5kvuvXcjevljs9U7tWU5tJNW%2FsU%2Bp3v%2FwmLs1gEKN0u1QloDmhcdPfD6BvKMUxiC7DObU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8797eb94fc6f568e-OSL
Content-Encoding: br
downstairsnegotiatebarren.com/sfp.js
172.67.180.87200 OK 36 kB URL GET HTTP/3 downstairsnegotiatebarren.com/sfp.js
IP 172.67.180.87:443
Certificate IssuerLet's Encrypt
Subjectdownstairsnegotiatebarren.com
Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44
ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash f4a2f8f9f99541c6f105bbd0a025bd40
1f8e3eff12168fdd9e719adfc098d24a45b6916a
b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 75d46764dda7653f156ec57156c50bad
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 17:47:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zhwbs8PORHuPuTkb5JUbiXDf7fTjuPMH2r1Ak1Ei62zIobrzPDzB%2FsXiQKYVvmTpQR0UFHaHze2sdc0u6ooMHH00xBg6xes399rcwNMYXUs2gQbnQgfDBsN5menUxuBcJ60vqYZlWIrHGVBDJuk4og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb93884eb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240424
151.101.65.229200 OK 853 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240424
IP 151.101.65.229:443
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hash 9b7d0f46bee1fd49a970044906f09c19
a30d74a716ce3835e3d78098a6ef9d391c45a994
79e006aa8a2b0666a8c29b6def1a640d999b02029abfb954f538fbd4a564ac2a
GET /gh/prebid/currency-file@1/latest.json?date=20240424 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.2036
x-jsd-version-type: version
etag: W/"63c-ow10pxbOODXj14CYpu+dORxFqZQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:47:44 GMT
age: 6413
x-served-by: cache-fra-eddf8230103-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 1988
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:44 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 1988
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:43 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2044
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:44 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2411
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
cmp.netpub.media/init.js
104.26.5.26200 OK 305 B IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type ASCII text, with CRLF line terminators
Hash 720836441c5012fb61927e69858c78c8
d14f75a95996684f94501ef0b0dfb993fba6f38b
be2a20fa9de8659f1d3f565699c13a51a9cae34c4ba3ce47ef0319398b265017
GET /init.js HTTP/1.1
Host: cmp.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 21 Feb 2024 16:43:37 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bJzEbI0eMhTq9m8F70W%2F%2BjePvDXqVFgR9goLDfeinOiQZA3wOt3zUQvosCOb9O8IEDAxeWAXvcurZLDVthXSfME6bah5frEv8TNTL6c%2Fd7TuHnjYgRVkrkT%2Bjm7aXkMkYms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8e4da97130-OSL
content-encoding: br
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2731
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
104.26.5.26302 Found 122 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 122 kB (122509 bytes)
Hash 4b4fd33b80105df46e3f367602ae340d
bf8e4fa71aa413edf6bec03931bd92feacd5d820
68c4ac5eecc2e590b16926df6ec49bd9f19bcd792ef1c87cf8f944c47afabbe0
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eaHwmHlvvIe8ftGG192rTypLokib7XrDnc7Vzw5UbRAsP1y3Afxrr9qnEmSw1G1zx4CgMIQlMWlDYbVq5jxocfK1O%2FaeZreR8cBcD6BLgfS4%2FAJZRgLYiY42Fkg4WA9Y2vEzenQt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8e4da77130-OSL
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2413
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2519
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
cadmus.script.ac/dahhc4ozyvjm6/script.js
104.18.22.145200 OK 3 B URL GET HTTP/2 cadmus.script.ac/dahhc4ozyvjm6/script.js
IP 104.18.22.145:443
Certificate IssuerLet's Encrypt
Subjectscript.ac
Fingerprint4D:86:BC:C1:1E:A2:FC:60:16:78:68:84:45:63:AB:01:3C:D3:C4:7F
ValidityMon, 26 Feb 2024 17:39:21 GMT - Sun, 26 May 2024 17:39:20 GMT
Hash b519d08ef66fd54910edbedba6181ec2
8d06436c33a3086259f2f1ccaf03425707eeff17
101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860
GET /dahhc4ozyvjm6/script.js HTTP/1.1
Host: cadmus.script.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:45 GMT
content-type: application/javascript
content-length: 3
age: 0
cache-control: public,max-age=259200,stale-while-revalidate=86400,stale-if-error=259200
etag: W/"601055f6a0c6408859f97b5f0a84bdb88441a80e"
last-modified: Mon, 01 Jan 2018 00:00:00 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb968ab8568a-OSL
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
142.132.249.188200 OK 896 B URL POST HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP 142.132.249.188:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjectghb.adtelligent.com
FingerprintF5:43:CF:90:9B:4A:6C:AC:40:BA:BE:D9:17:AF:C1:56:2A:AD:A1:2D
ValidityWed, 27 Mar 2024 00:00:00 GMT - Tue, 25 Jun 2024 23:59:59 GMT
Hash b36117ba60fc041e3549280af7d31eb1
bedca04becc44e24f56ebc491f13275a1531048a
55d8ff17243b2889f1ef1b018f9d8b081951e66bfdb98cdefaca45539c168acb
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 214
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 896
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
ghb.adtelligent.com/v2/auction/
23.227.151.194200 OK 890 B URL POST HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP 23.227.151.194:443
Certificate IssuerZeroSSL
Subjectghb.adtelligent.com
FingerprintF5:43:CF:90:9B:4A:6C:AC:40:BA:BE:D9:17:AF:C1:56:2A:AD:A1:2D
ValidityWed, 27 Mar 2024 00:00:00 GMT - Tue, 25 Jun 2024 23:59:59 GMT
Hash 8429a2d268661c48c1c875a3cdedc1b4
27f720000138b74df3e625d4efe5cc68186d20ea
a4f3d711ba0382ea9215b41416de2d5683903ed274082e4feda39b0c456fbb4d
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 205
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 890
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
ghb1.adtelligent.com/v2/auction/
23.227.151.194200 OK 889 B URL POST HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP 23.227.151.194:443
Certificate IssuerZeroSSL
Subjectghb1.adtelligent.com
FingerprintBE:6E:BC:25:98:9F:A4:B3:4C:D9:15:2E:C1:93:F4:32:9B:24:F4:05
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash 2ca8a5e7d37d37ce31e4d15e51297ad8
9865832d04526d10cc9518adaa7fd3ef27200212
a4acfc9a17e8093b6906fbc73695aa2f8b0954157e907836dd2f6eda1fb4f315
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 205
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 889
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
palmfulcultivateemergency.com/f5/a9/be/f5a9be79a5a728b7fb0b45808e034af5.js
192.243.59.12200 OK 16 kB URL GET HTTP/1.1 palmfulcultivateemergency.com/f5/a9/be/f5a9be79a5a728b7fb0b45808e034af5.js
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectpalmfulcultivateemergency.com
Fingerprint07:82:DF:6D:C7:7D:12:C1:AE:05:8B:71:01:EA:9E:AA:E3:1B:0F:72
ValidityTue, 23 Apr 2024 10:44:05 GMT - Mon, 22 Jul 2024 10:44:04 GMT
File type JavaScript source, ASCII text, with very long lines (44009), with no line terminators
Hash 11d447487e211f280c3aaef6bd3a5cf2
07d909324ead1b140aaf2b89304aead6144a6b32
3c3be0eb5142ea97974762771f20fc1ccca332d9d4293c8bf0627299397dfb38
GET /f5/a9/be/f5a9be79a5a728b7fb0b45808e034af5.js HTTP/1.1
Host: palmfulcultivateemergency.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 54c05cb9ed7644a2562d714532cf89b8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ghb2.adtelligent.com/v2/auction/
23.227.151.242200 OK 895 B URL POST HTTP/1.1 ghb2.adtelligent.com/v2/auction/
IP 23.227.151.242:443
Certificate IssuerZeroSSL
Subjectghb2.adtelligent.com
FingerprintDF:E8:56:6C:1A:91:F8:CA:91:7F:B2:28:33:88:46:E2:E0:09:FB:85
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash 558879d7da613b76863d402f2a778a50
f1d6335919796063488587b999f6769ca08c8a66
51cd589c7f1f05eaad8ba85e2bb614ac3c8d10acef6448ee542717b1ad03cd4d
POST /v2/auction/ HTTP/1.1
Host: ghb2.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 236
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 895
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
proftrafficcounter.com/stats
35.158.46.84200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 35.158.46.84:443
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 49f1a8f9a0fa8dee45207a6cfee0c62e
43c3719b1dfcc6ab5a6650aae46182cf7c2e9bdc
c1c02018d3bf05cfbf0e7106efa3cf69977198548f6e91dffb7f452436f7891a
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:45 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pwrpa.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e:2:1; expires=Sat, 22 Apr 2034 17:47:45 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2012
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:45 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2010
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:44 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 1992
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:44 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
142.132.249.188200 OK 891 B URL POST HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP 142.132.249.188:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjectghb.adtelligent.com
FingerprintF5:43:CF:90:9B:4A:6C:AC:40:BA:BE:D9:17:AF:C1:56:2A:AD:A1:2D
ValidityWed, 27 Mar 2024 00:00:00 GMT - Tue, 25 Jun 2024 23:59:59 GMT
Hash a41fa5aa734ca5a732fabe1b52c89356
2bd569574fe6054ccbd755c49d9a1bf55eda9f1b
671a41cfa0c764c534fcf0027023b40d2f22eeb105fa9bc9f523e6bf645780fa
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 206
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:45 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 891
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2511
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
ghb1.adtelligent.com/v2/auction/
23.227.151.194200 OK 892 B URL POST HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP 23.227.151.194:443
Certificate IssuerZeroSSL
Subjectghb1.adtelligent.com
FingerprintBE:6E:BC:25:98:9F:A4:B3:4C:D9:15:2E:C1:93:F4:32:9B:24:F4:05
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash f5bf4ea155801aa954c7923a309ee3b5
dc4e311b8c997c340200f59200bc68ec46aa3c39
8241a6bdc55e5c34f335419e5d01ca4517f7900f939690c625abeb40f0b71e64
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 214
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 892
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
ghb2.adtelligent.com/v2/auction/
23.227.151.242200 OK 892 B URL POST HTTP/1.1 ghb2.adtelligent.com/v2/auction/
IP 23.227.151.242:443
Certificate IssuerZeroSSL
Subjectghb2.adtelligent.com
FingerprintDF:E8:56:6C:1A:91:F8:CA:91:7F:B2:28:33:88:46:E2:E0:09:FB:85
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash 4afe0a9179edb0ee58d75b121d748945
06c7ab9db0499865a87a2e65c3a6ec88e96e7694
bd85444438802b04a150fedf9c2a654f0618f34cbd134febe7b8cf7823a51a6c
POST /v2/auction/ HTTP/1.1
Host: ghb2.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 213
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 892
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2048
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:45 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2410
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
ghb1.adtelligent.com/v2/auction/
23.227.151.194200 OK 888 B URL POST HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP 23.227.151.194:443
Certificate IssuerZeroSSL
Subjectghb1.adtelligent.com
FingerprintBE:6E:BC:25:98:9F:A4:B3:4C:D9:15:2E:C1:93:F4:32:9B:24:F4:05
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash a76c597f0a3aaf9b0bb9ec0c61522b75
d7779cf4d49e84976f6ab3c525e2a38b2a5b7ce4
a643215ca2aa5a924525e41b165ec46db18e558fa42c7c170b456a90c6931f13
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 236
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:45 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 888
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2724
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2513
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
142.250.74.35200 OK 206 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP 142.250.74.35:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 206 kB (205803 bytes)
Hash e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
142.250.74.131200 OK 53 kB URL GET HTTP/3 www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
IP 142.250.74.131:443
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
File type HTML document, ASCII text, with very long lines (36975)
Hash 19398d9cf99af5e26477dea000cdd8f4
40f46e74ed5d60d5f2f056e42489ee987e6579bf
f3c36feaf2cb5e0c498fa60896da0da19a5a9f7de40588fb7d3bf50a27a1eb22
GET /recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 17:47:46 GMT
content-security-policy: script-src 'nonce-y-OUCy4rmsPA3giJe-6aPQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
142.250.74.35200 OK 206 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP 142.250.74.35:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 206 kB (205803 bytes)
Hash e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 572683
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:25:07 GMT
expires: Fri, 18 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 519759
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 572019
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
142.250.74.35200 OK 206 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP 142.250.74.35:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 206 kB (205803 bytes)
Hash e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129178
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js
142.250.74.164200 OK 7.4 kB URL GET HTTP/3 www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js
IP 142.250.74.164:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (17602)
Hash a881e4c268e13ad20405ae80fca4c36b
dee477906e2c92b4c7747029a2409069b9b676ad
63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 45709
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type ASCII text, with very long lines (56412), with no line terminators
Hash 2c00b9f417b688224937053cd0c284a5
17b4c18ebc129055dd25f214c3f11e03e9df2d82
1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 93411
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
142.250.74.131200 OK 206 kB URL GET HTTP/3 www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
IP 142.250.74.131:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 206 kB (205913 bytes)
Hash e4eb924eec164dfe5fb43e5d8e6b2a2f
582bad0eac6440aa49632ca1e24d7a52a89d7d92
428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 24 Apr 2024 17:47:46 GMT
date: Wed, 24 Apr 2024 17:47:46 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
unseenreport.com/pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f5a9be79a5a728b7fb0b45808e034af5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
192.243.59.12200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f5a9be79a5a728b7fb0b45808e034af5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f5a9be79a5a728b7fb0b45808e034af5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 17:47:47 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a8d053d381aeee2abc3e510b2af91362
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=04e6aaf7cf19824c28b9aefc25a57a4d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
192.243.59.12200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=04e6aaf7cf19824c28b9aefc25a57a4d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP 192.243.59.12:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13
ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=86b05a2c-f975-45e9-95e6-1b6cc2dfd28e&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=04e6aaf7cf19824c28b9aefc25a57a4d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 17:47:47 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d4d0aca619e59147dbce17289c932422
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx&co=aHR0cHM6Ly9wd3JwYS5jYzo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=gt6bys5mzskc
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 572684
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 216.58.207.227:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 21:52:09 GMT
expires: Tue, 22 Apr 2025 21:52:09 GMT
cache-control: public, max-age=31536000
age: 158138
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api2/reload?k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
142.250.74.131200 OK 30 kB URL POST HTTP/3 www.recaptcha.net/recaptcha/api2/reload?k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
IP 142.250.74.131:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
Hash e078929ac65a210b4794ff6935161a96
1acfaf2a4b083c99db9a5d45f1411cdb797850aa
367cbf53286696a62a1a9894cff599f47c79920d51b79eff1206042367ce8cc7
POST /recaptcha/api2/reload?k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 7222
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 17:47:47 GMT
expires: Wed, 24 Apr 2024 17:47:47 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AKPP-6dE93BdBQ-7k3zMvNnbmaTmxLP3akEg9vxmZws106D6Jxy3O-7OE-B5hFmFxVLwKJyjbjYCc1NLEPLqI8o;Path=/recaptcha;Expires=Mon, 21-Oct-2024 17:47:47 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/canonical_car.png
142.250.74.35200 OK 11 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/canonical_car.png
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Hash a4741c6089e163f0e5c0cdb2c698a03e
03b190c8d9350802cbabbccd2757cff1fb7115f0
c9685b413894b0647b42edf9cac1fc0b2ed044c1fe238d843b9ca3d29db1b805
GET /recaptcha/api2/canonical_car.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 11174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 21:46:08 GMT
expires: Mon, 29 Apr 2024 21:46:08 GMT
cache-control: public, max-age=604800
age: 158499
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
142.250.74.35200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 21 Apr 2024 18:58:27 GMT
expires: Sun, 28 Apr 2024 18:58:27 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 254960
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:40:07 GMT
expires: Thu, 25 Apr 2024 02:40:07 GMT
cache-control: public, max-age=604800
age: 572860
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js
142.250.74.164200 OK 7.4 kB URL GET HTTP/3 www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js
IP 142.250.74.164:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D
ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File type JavaScript source, ASCII text, with very long lines (17602)
Hash a881e4c268e13ad20405ae80fca4c36b
dee477906e2c92b4c7747029a2409069b9b676ad
63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 45710
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:48:43 GMT
expires: Thu, 25 Apr 2024 02:48:43 GMT
cache-control: public, max-age=604800
age: 572344
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
145.40.97.67204 No Content 0 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:47:47 GMT
server: envoy
vary: accept-encoding, Accept-Encoding
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
onetag-sys.com/usync/?pubId=59a18369e249bfb
51.75.86.98204 No Content 0 B URL GET HTTP/2 onetag-sys.com/usync/?pubId=59a18369e249bfb
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=59a18369e249bfb HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
onetag-sys.com/usync/?cb=1713980865281
51.75.86.98204 No Content 0 B URL GET HTTP/2 onetag-sys.com/usync/?cb=1713980865281
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1713980865281 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
id.a-mx.com/sync/?tagId=bmV0cHViLmNvbQ&ref=null&u=https://pwrpa.cc/UzxN&tl=https://pwrpa.cc/UzxN&nf=0&rt=true&v=8.40.0&av=2.0&vg=pbjs_netpub240420&us_privacy=null&am=null&gdpr=0&gdpr_consent=
79.127.216.47200 OK 66 B URL GET HTTP/1.1 id.a-mx.com/sync/?tagId=bmV0cHViLmNvbQ&ref=null&u=https://pwrpa.cc/UzxN&tl=https://pwrpa.cc/UzxN&nf=0&rt=true&v=8.40.0&av=2.0&vg=pbjs_netpub240420&us_privacy=null&am=null&gdpr=0&gdpr_consent=
IP 79.127.216.47:443
ASN #60068 Datacamp Limited
Certificate IssuerSectigo Limited
Subjectid.a-mx.com
FingerprintE1:1E:89:FE:28:E7:84:69:37:FD:D0:2F:18:B1:BB:F3:45:1E:1C:E9
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash 7045176073f69e83bb10b701bb5f5731
2781034c99c73a590ec1237e7d5cd2db6f7d2791
ec57ba81df3814c103bbfa8d14454e81b06d316fba20dc6e45b0f975612f0538
GET /sync/?tagId=bmV0cHViLmNvbQ&ref=null&u=https://pwrpa.cc/UzxN&tl=https://pwrpa.cc/UzxN&nf=0&rt=true&v=8.40.0&av=2.0&vg=pbjs_netpub240420&us_privacy=null&am=null&gdpr=0&gdpr_consent= HTTP/1.1
Host: id.a-mx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 24 Apr 2024 19:47:48 +0200
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
content-type: application/json
content-length: 66
s.console.adtarget.com.tr/sync.html?aid=748067
142.132.249.184204 No Content 0 B URL GET HTTP/1.1 s.console.adtarget.com.tr/sync.html?aid=748067
IP 142.132.249.184:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjects.console.adtarget.com.tr
FingerprintBC:91:3A:C5:4F:E2:45:62:D9:A6:3C:F6:EB:BA:23:C8:B2:D7:B9:4D
ValidityMon, 18 Mar 2024 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync.html?aid=748067 HTTP/1.1
Host: s.console.adtarget.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: Adtarget
Date: Wed, 24 Apr 2024 17:47:48 GMT
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
s.adtelligent.com/sync.html?aid=651796
49.12.126.49200 OK 720 B URL GET HTTP/1.1 s.adtelligent.com/sync.html?aid=651796
IP 49.12.126.49:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjects.adtelligent.com
Fingerprint76:DE:03:04:D6:32:51:7E:E7:A9:8B:0B:04:C4:86:10:D8:A2:4D:72
ValidityFri, 22 Mar 2024 00:00:00 GMT - Thu, 20 Jun 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (1428), with no line terminators
Hash 934251f9aa1e6f3ab449fd7ad04d9f88
0114d0c08c22c15aee4bbfbdb1e103186a468b34
3bcdbe3e1b3a41c30e645bfa4d556d0f51c534b1b1f8c4a0a49e7a5ff7512115
GET /sync.html?aid=651796 HTTP/1.1
Host: s.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 720
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
Set-Cookie: vmuid=7c1790de98f23d5b; expires=Fri, 26 Jul 2024 17:47:48 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
onetag-sys.com/usync/?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Dg%26ep%3D241%26traffic_source%3Dsnippet%26session%3DA2C71CB5EEEE66FB%26sp%3D651796%26pb%3D449137%26c%3D622134%26a%3D558187%26domain%3Dpwrpa.cc%26extuid%3D%24%7BUSER_TOKEN%7D
51.75.86.98302 Found 0 B URL GET HTTP/2 onetag-sys.com/usync/?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Dg%26ep%3D241%26traffic_source%3Dsnippet%26session%3DA2C71CB5EEEE66FB%26sp%3D651796%26pb%3D449137%26c%3D622134%26a%3D558187%26domain%3Dpwrpa.cc%26extuid%3D%24%7BUSER_TOKEN%7D
IP 51.75.86.98:443
Requested by https://s.adtelligent.com/sync.html?aid=651796
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Dg%26ep%3D241%26traffic_source%3Dsnippet%26session%3DA2C71CB5EEEE66FB%26sp%3D651796%26pb%3D449137%26c%3D622134%26a%3D558187%26domain%3Dpwrpa.cc%26extuid%3D%24%7BUSER_TOKEN%7D HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s.adtelligent.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store
location: https://sync.adtelligent.com/csync?t=g&ep=241&traffic_source=snippet&session=A2C71CB5EEEE66FB&sp=651796&pb=449137&c=622134&a=558187&domain=pwrpa.cc&extuid=
content-length: 0
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
172.64.149.23 315 B URL zerossl.ocsp.sectigo.com/
IP 172.64.149.23:0
Hash 529da644340682322ce19db1c4d0688f
4c6c211f12d13b59c111890dd105c97939a5e747
d528ce2ef11adbc68685a6e2299c3f5a69ade43f6c20015679986f61eac391a9
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 17:47:49 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Tue, 23 Apr 2024 14:30:00 GMT
Expires: Tue, 30 Apr 2024 14:29:59 GMT
Etag: "4c6c211f12d13b59c111890dd105c97939a5e747"
Cache-Control: max-age=506677,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8797ebaf5ef47127-OSL
ads234.adtelligent.com/tracking/csmatch/?aid=651796cmpId=570607err=fail
49.12.126.49200 OK 43 B URL GET HTTP/1.1 ads234.adtelligent.com/tracking/csmatch/?aid=651796cmpId=570607err=fail
IP 49.12.126.49:443
ASN #24940 Hetzner Online GmbH
Requested by https://s.adtelligent.com/sync.html?aid=651796
Certificate IssuerZeroSSL
Subjectads234.adtelligent.com
FingerprintE7:A0:E1:6A:2D:83:F9:C9:59:A7:6E:AD:DF:E6:DF:71:93:E0:5E:F5
ValiditySun, 21 Apr 2024 00:00:00 GMT - Sat, 20 Jul 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /tracking/csmatch/?aid=651796cmpId=570607err=fail HTTP/1.1
Host: ads234.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s.adtelligent.com/
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:48 GMT
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: https://s.adtelligent.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
sync.adtelligent.com/csync?t=g&ep=241&traffic_source=snippet&session=A2C71CB5EEEE66FB&sp=651796&pb=449137&c=622134&a=558187&domain=pwrpa.cc&extuid=
185.83.71.234200 OK 43 B URL GET HTTP/1.1 sync.adtelligent.com/csync?t=g&ep=241&traffic_source=snippet&session=A2C71CB5EEEE66FB&sp=651796&pb=449137&c=622134&a=558187&domain=pwrpa.cc&extuid=
IP 185.83.71.234:443
Requested by https://s.adtelligent.com/sync.html?aid=651796
Certificate IssuerLet's Encrypt
Subjectsync.adtelligent.com
Fingerprint2C:5E:FE:77:91:E0:9E:98:A2:D1:1A:0C:31:06:E4:A9:4C:23:EB:E7
ValidityTue, 19 Mar 2024 22:06:15 GMT - Mon, 17 Jun 2024 22:06:14 GMT
File type GIF image data, version 89a, 1 x 1
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=g&ep=241&traffic_source=snippet&session=A2C71CB5EEEE66FB&sp=651796&pb=449137&c=622134&a=558187&domain=pwrpa.cc&extuid= HTTP/1.1
Host: sync.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.adtelligent.com/
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:48 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 7c1790de98f23d5b
Set-Cookie: vmuid=7c1790de98f23d5b; expires=Fri, 26 Jul 2024 17:47:49 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
ads234.adtelligent.com/tracking/csmatch/?aid=651796cmpId=622134
49.12.126.49200 OK 43 B URL GET HTTP/1.1 ads234.adtelligent.com/tracking/csmatch/?aid=651796cmpId=622134
IP 49.12.126.49:443
ASN #24940 Hetzner Online GmbH
Requested by https://s.adtelligent.com/sync.html?aid=651796
Certificate IssuerZeroSSL
Subjectads234.adtelligent.com
FingerprintE7:A0:E1:6A:2D:83:F9:C9:59:A7:6E:AD:DF:E6:DF:71:93:E0:5E:F5
ValiditySun, 21 Apr 2024 00:00:00 GMT - Sat, 20 Jul 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /tracking/csmatch/?aid=651796cmpId=622134 HTTP/1.1
Host: ads234.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s.adtelligent.com/
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:47:48 GMT
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: https://s.adtelligent.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
142.250.74.131200 OK 5.6 kB URL GET HTTP/3 www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
IP 142.250.74.131:443
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
Hash 3898f7859dab426904b4390a24710b9a
a8788a8309b874a462b7ded0664ee249a1ac1496
7a6005bc221c7da4c917553e1db47cc91dceb30cebe6b379b08f25d24a366b9a
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 17:47:46 GMT
content-security-policy: script-src 'nonce-rltq77gogHa_tbVda3TzTw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
104.26.5.26302 Found 10 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Hash 01efbac95c73cc87e6114a17e1a54952
cba0eb75a99630a58b054b4c1cc98266fc7ff20b
216a0fbb2bbfa63a42d24ce8436dce1bbef4144bc81806e4c9bf912db004be26
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=iso-8859-1
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6XJj5Zu5e43t9eXZY4RNuqWdw25mcR82LMnqZqxiNxoJ1Hj7KddwiM%2BdLBz%2FI4aASFJZ1KFm7USa9Q27vU4%2Bi3Nc5z86WlQl8PmqONt45H4rTEJH2364ZfqiWD3JKddKcTckjW5x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8e4daa7130-OSL
X-Firefox-Spdy: h2
cmp.netpub.media/17139808638430.23875247553048973/run.js?v=17139808638430.23875247553048973
104.26.5.26200 OK 3.1 kB URL GET HTTP/2 cmp.netpub.media/17139808638430.23875247553048973/run.js?v=17139808638430.23875247553048973
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 54f643b0fa8a7d71cb117679a6fbb2ce
573d440c0f9fa4cf53e85cf86a86eba173933a1c
851d2ece063bcac9a5addec55308a32557f978d2daf3950395fc3dc41e9e9336
GET /17139808638430.23875247553048973/run.js?v=17139808638430.23875247553048973 HTTP/1.1
Host: cmp.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 16:05:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=trSY7jgxaYe7YQGpGMPd8vW7M%2BkrHBDgWqHPmV%2Bt3KaXK0ijJ%2FGqTbgmYz0qcTB%2BiyGW8SnKVwtGzgdOWmCoAK6BXzBIdJZuvS7BLwZCUm8%2FfyEFAFTPmOQ%2Fu5VC39xqWy8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f1f167130-OSL
content-encoding: br
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2085
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:48:04 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2498
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
ghb2.adtelligent.com/v2/auction/
23.227.151.242200 OK 889 B URL POST HTTP/1.1 ghb2.adtelligent.com/v2/auction/
IP 23.227.151.242:443
Certificate IssuerZeroSSL
Subjectghb2.adtelligent.com
FingerprintDF:E8:56:6C:1A:91:F8:CA:91:7F:B2:28:33:88:46:E2:E0:09:FB:85
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash ab11af82df7f188a3f741eef7e0bcffc
394c05eb16244a282080735200c31b2b50ce433f
050f41494ef6d9d51a298712584ae740a427f8e9888992320c3b2a96bfca6317
POST /v2/auction/ HTTP/1.1
Host: ghb2.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 378
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:04 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 889
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2084
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:48:05 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2493
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
142.132.249.188200 OK 887 B URL POST HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP 142.132.249.188:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjectghb.adtelligent.com
FingerprintF5:43:CF:90:9B:4A:6C:AC:40:BA:BE:D9:17:AF:C1:56:2A:AD:A1:2D
ValidityWed, 27 Mar 2024 00:00:00 GMT - Tue, 25 Jun 2024 23:59:59 GMT
Hash 71d6141508f6e7693c7c4be69bbd0b62
6ac46760a0ab1104a3794393bb14b49c6215db1d
d84c32ad803f4cc106789c4fb5eb441fbc0cda04fcdb12ce99e3e5cc473c04dc
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 378
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:05 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 887
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
fstatic.netpub.media/extra/cmp/cmp-gdpr.js
104.26.5.26301 Moved Permanently 2.4 kB URL GET HTTP/2 fstatic.netpub.media/extra/cmp/cmp-gdpr.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Hash db317986c74459fbf08181d5568fe30f
6c3dfe675381d546c4847a7162b66c85071c00cf
c0a211ed816ff9668b1f0982d1c58d8e9a6ef7173f741e2e63dd4037cf65c1e7
GET /extra/cmp/cmp-gdpr.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html; charset=iso-8859-1
location: https://cmp.netpub.media/init.js
cache-control: max-age=172800
expires: Fri, 26 Apr 2024 12:56:26 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: HIT
age: 17477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VqNxmoTJOrjR%2BBLXxqCXCTi3voRB%2FcVVgqnVP6l7KK6TeL3XdbIc2ICRq51gsV1Ji1MKVxBJkyAM0Di%2B58MALjwTxZvRAqGQOrH5UaV9mYNnShxBUsXZUgwzQzPEbll6VYfRy39M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8d7c4f7130-OSL
X-Firefox-Spdy: h2
ghb1.adtelligent.com/v2/auction/
185.83.69.58200 OK 892 B URL POST HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP 185.83.69.58:443
Certificate IssuerZeroSSL
Subjectghb1.adtelligent.com
FingerprintBE:6E:BC:25:98:9F:A4:B3:4C:D9:15:2E:C1:93:F4:32:9B:24:F4:05
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash 046fa281c21c00d0e800444d83cd1d9d
70e730a436e57c0fe5feeb4d78c8f29e3bac6e9f
a1bec38f7eb73b0a3ba5bc051323b6c6c4ba75f404f0a8ef60398d5859d74b0c
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 408
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:05 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 892
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2814
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2140
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:48:06 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ghb2.adtelligent.com/v2/auction/
23.227.151.242200 OK 888 B URL POST HTTP/1.1 ghb2.adtelligent.com/v2/auction/
IP 23.227.151.242:443
Certificate IssuerZeroSSL
Subjectghb2.adtelligent.com
FingerprintDF:E8:56:6C:1A:91:F8:CA:91:7F:B2:28:33:88:46:E2:E0:09:FB:85
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash ff682d1ba09329b263048ea67da1052b
cdbadd8b28b01e37ca9342c1406e825a128b400c
0fae25d5ddbc3820ab6a05fd39049d4e5ea0d26fd6e5c36b0d249e19f7333261
POST /v2/auction/ HTTP/1.1
Host: ghb2.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 409
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:05 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 888
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2809
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2105
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:48:06 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
142.132.249.188200 OK 894 B URL POST HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP 142.132.249.188:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerZeroSSL
Subjectghb.adtelligent.com
FingerprintF5:43:CF:90:9B:4A:6C:AC:40:BA:BE:D9:17:AF:C1:56:2A:AD:A1:2D
ValidityWed, 27 Mar 2024 00:00:00 GMT - Tue, 25 Jun 2024 23:59:59 GMT
Hash 7d46e2dba4e83418fd94bf80df8cd5ac
93f842821bfac8fa59f09b7d25bff452beb806ec
03a2de084dd915cdbc3e90de191edfe5eb8f898c2c4c2764fa4d5430ad860502
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 387
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:07 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 894
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2606
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
145.40.97.67204 No Content 0 B IP 145.40.97.67:443
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA1:19:DD:ED:07:5D:68:74:9A:FE:2B:DF:66:5F:D6:E6:F5:B4:1E:6C
ValidityWed, 06 Mar 2024 11:52:06 GMT - Tue, 04 Jun 2024 11:52:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2105
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://pwrpa.cc
cache-control: max-age=0, private, must-revalidate
date: Wed, 24 Apr 2024 17:48:07 GMT
server: envoy
vary: origin, accept-encoding, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ghb1.adtelligent.com/v2/auction/
185.83.69.58200 OK 879 B URL POST HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP 185.83.69.58:443
Certificate IssuerZeroSSL
Subjectghb1.adtelligent.com
FingerprintBE:6E:BC:25:98:9F:A4:B3:4C:D9:15:2E:C1:93:F4:32:9B:24:F4:05
ValiditySat, 30 Mar 2024 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash 0efdb98d0479f0a7a2fab7b068fdaacc
be8885e95c2f4a06c6613eba61e1421a3d00913a
5ee8f50cf08c3cbeb52f6010bda6dd429be979298ea744ff507f952212dbedc5
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 386
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Cookie: vmuid=7c1790de98f23d5b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Adtelligent
Date: Wed, 24 Apr 2024 17:48:06 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 879
Access-Control-Allow-Origin: https://pwrpa.cc
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
onetag-sys.com/prebid-request
51.75.86.98200 OK 41 B URL POST HTTP/2 onetag-sys.com/prebid-request
IP 51.75.86.98:443
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint9D:25:F4:C3:B5:6A:40:DB:23:4A:02:98:48:44:09:DB:7C:07:BF:90
ValidityTue, 23 Jan 2024 00:00:00 GMT - Wed, 29 Jan 2025 23:59:59 GMT
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
content-type: text/plain
Content-Length: 2599
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pwrpa.cc
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
104.26.5.26200 OK 441 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 02:08:54 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fd1F%2BzaKK%2FeDIMdzJ09L1kRqEb7ZwPvTT0kOx3ym3owiGf%2F7wakqjxmMS2tbINxXbosaoCxB27nNLA22Kk26DNWWi12WQ8T1zZKwM3ranCKbqtChKhzaCDNdaviXXFBHmgH1kSHG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f3f3c7130-OSL
content-encoding: br
X-Firefox-Spdy: h2
uii.io/img/logo.png
104.21.64.28200 OK 5.0 kB IP 104.21.64.28:443
Certificate IssuerLet's Encrypt
Subjectuii.io
Fingerprint1B:22:48:3D:86:83:72:44:23:26:51:C0:E2:06:57:CF:0F:FF:84:87
ValidityMon, 26 Feb 2024 03:25:08 GMT - Sun, 26 May 2024 03:25:07 GMT
File type PNG image data, 50 x 57, 8-bit/color RGBA, non-interlaced
Hash 0fae53a1ba0a876ac14575f032d3af88
1c44fd0f44e75fccd26896d425e6cb6700ea6555
7740ffb8f439ec712a1be27fb2b59059f0b95c8db4b2b9be52116ff9b81365dc
GET /img/logo.png HTTP/1.1
Host: uii.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: image/png
content-length: 4952
cache-control: public, max-age=31536000
expires: Thu, 17 Apr 2025 01:24:15 GMT
last-modified: Tue, 16 Apr 2024 23:54:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-content-type-options: nosniff
vary: User-Agent,User-Agent, Accept-Encoding
x-xss-protection: 1; mode=block
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 663809
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=woHUY5Az3n%2BLKaE%2Fy0ElV%2FaD7MNRXkgOPOFYgO%2Fope2EuVwwFTI3djcJamrU5VwzAy0R3TpXglTp90z9Ba7lN5CWtIKkMwnEpm3GR1rU9oj0OtX1pLZVby0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb910c6c7128-OSL
X-Firefox-Spdy: h2
fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863626
104.26.5.26301 Moved Permanently 441 kB URL GET HTTP/2 fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863626
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863626 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html
content-length: 167
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
cache-control: max-age=3600
expires: Wed, 24 Apr 2024 18:47:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xlorxlqGgplbsYXKudpbslWCbQgAX2lnzrEvFGbHZPcksZ5qZYlHRyiXZEwbgKGbGHGvT%2Bd0J9LD4s%2Bmuq8lCoId%2F3ULuSi3NijVNaVk6%2BMZbP9WNn7czyq4utP9eEfMHMLzD7Rk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dbc9a7130-OSL
X-Firefox-Spdy: h2
pwrpa.cc/cl_theme/build/css/link.css?ver=6.6.2
188.114.97.1200 OK 14 kB URL GET HTTP/3 pwrpa.cc/cl_theme/build/css/link.css?ver=6.6.2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type ASCII text, with very long lines (14386), with no line terminators
Hash b37d1e31dc07c949ca6fa820377fe8eb
9d744ae42f3cb7bfffeea683541056ab87ea5f08
4ac6e89646801b8570cfe1639626a20ef05eae073d3369b709ad12d11d285b76
GET /cl_theme/build/css/link.css?ver=6.6.2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=14450
alt-svc: h3=":443"; ma=86400
expires: Mon, 20 May 2024 16:35:20 GMT
last-modified: Tue, 26 Mar 2024 02:08:50 GMT
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding,User-Agent
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 349943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dNNBfGAqMjfLQcUm4ILUn8i7RyaVXjVSbFaF1jJV1eW1dbTKBERNBsKbquqiqWtEl16uGGaA9WKHwP%2Bk%2Bmqtv3BRQQ5jw9ZrazEQavis98vjmmlXub66VCj9%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8d5b720afe-OSL
content-encoding: br
fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863622
104.26.5.26301 Moved Permanently 441 kB URL GET HTTP/2 fstatic.netpub.media/static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863622
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/f009b805e4e5b31f4fa4ac2853b6a2f5.min.js?1713980863622 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/html
content-length: 167
location: https://fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/service.js
cache-control: max-age=3600
expires: Wed, 24 Apr 2024 18:47:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9hjW3%2BNC4CYNgr32mHWL7ENBlwUlmwxkgbO5Buudsi%2FR5BYKJ3h%2Fky0b9KXh8G%2BHCLrdMt0u0C%2F015eZDmNmRSO%2BXXd6UJcvoOTo%2FjKrc8Z9xwvlc6MXQ1hDWbrsyQNkCZt0ECkT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb8dac8c7130-OSL
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api2/payload?p=06AFcWeA61zIhBN8qzyXwx9HXcPnEfFvrZO1u9d1bnpdDHKvd-2KC52G-lh7ExAGXXRlmWVZYNBpuak1rF30MFmAoDqsyPlGKZCnNNQsPYwSp8sAS9_tNuJfR4ca66vY_BoFrKWjteWOm9IpOhjmkNmF07xLiUSr2w93BRsd1FeyjHGM545_c3RXFjt30n8p6gUvqzjiPUff0W&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
142.250.74.131200 OK 43 kB URL GET HTTP/3 www.recaptcha.net/recaptcha/api2/payload?p=06AFcWeA61zIhBN8qzyXwx9HXcPnEfFvrZO1u9d1bnpdDHKvd-2KC52G-lh7ExAGXXRlmWVZYNBpuak1rF30MFmAoDqsyPlGKZCnNNQsPYwSp8sAS9_tNuJfR4ca66vY_BoFrKWjteWOm9IpOhjmkNmF07xLiUSr2w93BRsd1FeyjHGM545_c3RXFjt30n8p6gUvqzjiPUff0W&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
IP 142.250.74.131:443
Requested by https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Hash 22020d506cdd9cf17f3f07b1a667deaa
f5f75ec6b30c368ee490063dd81d7fe2f44ec4c4
290ae7bc5848f9d818642613a9626b2e82651fa16addcb8ab564fb46c89e7c48
GET /recaptcha/api2/payload?p=06AFcWeA61zIhBN8qzyXwx9HXcPnEfFvrZO1u9d1bnpdDHKvd-2KC52G-lh7ExAGXXRlmWVZYNBpuak1rF30MFmAoDqsyPlGKZCnNNQsPYwSp8sAS9_tNuJfR4ca66vY_BoFrKWjteWOm9IpOhjmkNmF07xLiUSr2w93BRsd1FeyjHGM545_c3RXFjt30n8p6gUvqzjiPUff0W&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdLySYUAAAAAIv462zLe6dfgqsZRLFuGSEQy1Zx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/jpeg
expires: Wed, 24 Apr 2024 17:47:47 GMT
date: Wed, 24 Apr 2024 17:47:47 GMT
cache-control: private, max-age=30
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
142.250.74.131200 OK 921 B URL GET HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP 142.250.74.131:443
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
FingerprintD2:13:30:4E:26:7E:CA:53:A2:34:37:55:7E:91:D6:DB:95:37:A0:C6
ValidityMon, 18 Mar 2024 19:43:06 GMT - Mon, 10 Jun 2024 19:43:05 GMT
File type JavaScript source, ASCII text, with very long lines (921), with no line terminators
Hash b832740e618479615e7f4ec2d6d18e95
39e2c70fbc1164d6748e0314c36691c42245c53a
66b51ffa06c4662b57b6b492d53318ac5e672cd53f52ce08e2699325eb796414
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 24 Apr 2024 17:47:44 GMT
date: Wed, 24 Apr 2024 17:47:44 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cmp.netpub.media/17139808642330.7211441339573071/run.js?v=17139808642330.7211441339573071
104.26.5.26200 OK 251 B URL GET HTTP/2 cmp.netpub.media/17139808642330.7211441339573071/run.js?v=17139808642330.7211441339573071
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type JavaScript source, ASCII text, with no line terminators
Hash 945277581d767415edcae0911173c943
9a7e509c4b0cb318b6e32a93f88af95f21b5760b
874b90f5b2bf0b3dac07481e766603bed23e9e05d685873b50dce5eb8432e08d
GET /17139808642330.7211441339573071/run.js?v=17139808642330.7211441339573071 HTTP/1.1
Host: cmp.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 16:05:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lt26ydJK36ejSRq2F2ij9jo%2BhoglajAe4wLMhTs4saFMxlsGzDvJJEn4B4TYSNs%2FNyR1LUCz1VKwrKCDyQoDkgCtQ38I5NVhLaVnvP%2BE3mrnZslOZw0w5Mxt7L98zkFUqsg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb917a7c7130-OSL
content-encoding: br
X-Firefox-Spdy: h2
script.4dex.io/a/latest/adagio.js
104.26.9.169200 OK 71 kB URL GET HTTP/1.1 script.4dex.io/a/latest/adagio.js
IP 104.26.9.169:443
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
FingerprintAB:9B:A2:70:ED:27:23:EF:84:14:22:FF:67:9F:5D:50:06:2D:04:28
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65354)
Hash 2cea63505a74309263526b320f034c82
130ca3583955d4785e871e9950c05775975d81e9
c3c9508e905060bb9518439718aef255b2e29968eb9a33422b28426d96ff5946
GET /a/latest/adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
Origin: https://pwrpa.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 17:47:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"2cea63505a74309263526b320f034c82"
Last-Modified: Thu, 18 Apr 2024 08:50:17 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 520451
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cUZGgxThp%2BW4sDJTW0CAlurg1IyaqvjvCWwIYgUjVeRDIdQ%2BC1qeixfBNC6UtSkr0worJ6Bi2TytBt2MxgckqXHoOvIEBdcSBKoZh3Sg4cgUDfaFeWip0WgL8iJ4x%2BdV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8797eb961c8456a4-OSL
Content-Encoding: br
pwrpa.cc/cl_theme/build/js/script.min.js?ver=6.6.2
188.114.97.1200 OK 226 kB URL GET HTTP/3 pwrpa.cc/cl_theme/build/js/script.min.js?ver=6.6.2
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
Size 226 kB (225927 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cl_theme/build/js/script.min.js?ver=6.6.2 HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/UzxN
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
expires: Mon, 20 May 2024 16:35:21 GMT
last-modified: Mon, 19 Jun 2023 14:53:00 GMT
vary: Accept-Encoding,User-Agent
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 349942
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TmPnbKLhSgr6zPgXpBZ4zlfQlJQdfVpvSKNdtLjsjLJEIC2naf078okoK7uIy7IFdk1ZhUM2UaReNunBD81MmZiupP9q6Xr53hiEUvwMH%2FWK%2B%2FxjAD0xgbdv5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8d6b840afe-OSL
content-encoding: br
pwrpa.cc/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyUG93ZXIlMjBQYXNzd29yZHMlMjAtJTIwR2V0JTIwYSUyMFNhZmUlMjBQYXNzd29yZCUyMiUyQyUyMnglMjIlM0EwLjY1NjkzNjEyNTA0MzE0ODclMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnB3cnBhLmNjJTJGVXp4TiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
188.114.97.1200 OK 5.2 kB URL GET HTTP/3 pwrpa.cc/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyUG93ZXIlMjBQYXNzd29yZHMlMjAtJTIwR2V0JTIwYSUyMFNhZmUlMjBQYXNzd29yZCUyMiUyQyUyMnglMjIlM0EwLjY1NjkzNjEyNTA0MzE0ODclMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnB3cnBhLmNjJTJGVXp4TiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpwrpa.cc
Fingerprint96:5B:6C:BC:EA:FE:07:51:5D:D1:09:A4:E9:87:BD:A2:E3:F5:09:39
ValiditySat, 16 Mar 2024 21:19:29 GMT - Fri, 14 Jun 2024 21:19:28 GMT
File type JavaScript source, ASCII text, with very long lines (5321), with no line terminators
Hash c39ac5d2d5529488fd16b01c442ec932
e462b41c3d6028cb906f3ec43897962d9a7c9140
e13259377cb24ec79b2d4fcfc7e000fb6dd8806220acc310e58064fdda56b16b
GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyUG93ZXIlMjBQYXNzd29yZHMlMjAtJTIwR2V0JTIwYSUyMFNhZmUlMjBQYXNzd29yZCUyMiUyQyUyMnglMjIlM0EwLjY1NjkzNjEyNTA0MzE0ODclMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnB3cnBhLmNjJTJGVXp4TiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q= HTTP/1.1
Host: pwrpa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Cookie: AppSession=7042e52aad52bc5b73a7517678eb9814; refUzxN=ZWFiYzM2Y2Q0OTIyNzAwOTgyZmIyMjkxYzExMDZkNDdlODI0NDU1NzAxODlmMjE1NzgxNGQ5ZGU0ODhjNjU4OXcWQFte1dM%2FdMPuGGofqi4Wp38uCntzPUq2bz40MiGA; csrfToken=736751168758e95a0bc38665296188644d876a4510decdae0164377b6cacda0c13cda5191d96166cd3b8529ea3dd2ea02ac3500df43869b322e650c20a19e383; ab=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: https://pwrpa.cc
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Set-Cookie, Cache-Control
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-max-age: 600
set-cookie: google-analytics_v4_HXLE__engagementDuration=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__engagementStart=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__counter=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__ga4sid=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__session_counter=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__ga4=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_HXLE__let=; Domain=pwrpa.cc; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
cfz_google-analytics_v4=%7B%22HXLE_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1745516863867%7D%2C%22HXLE_engagementStart%22%3A%7B%22v%22%3A%221713980863867%22%2C%22e%22%3A1745516863867%7D%2C%22HXLE_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1745516863867%7D%2C%22HXLE_ga4sid%22%3A%7B%22v%22%3A%221857201419%22%2C%22e%22%3A1713982663867%7D%2C%22HXLE_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1745516863867%7D%2C%22HXLE_ga4%22%3A%7B%22v%22%3A%22683f730c-b12e-4069-b79c-1a9b2cf0be7f%22%2C%22e%22%3A1745516863867%7D%2C%22HXLE_let%22%3A%7B%22v%22%3A%221713980863867%22%2C%22e%22%3A1745516863867%7D%7D; Domain=pwrpa.cc; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
x-robots-tag: none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10fjbUOFnlL3YNPAYNG9mbnwa3VB%2BCLUQu4ddvtl8bAfCCDGDWdPnjBtLdkjJqIDmksIz%2FcbBO2PapfL8Hupm4LhPKaE1%2BiZK%2FDOVJV5NBmEvIG5ZSEeHuUJpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f2d5a0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
104.26.5.26200 OK 441 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 02:08:54 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8M7UJrPdg1l3ORFmtjl5qhLjFXXaDTSL91WPdUmhNnWKlqCu6Av9YnO4oNKZMGFy4xSXWHwEjUzA9zD1erTAwsgr3%2Fe9ezcTNSYpqr2jsu%2FRHOHHHIVHHUoB%2F6IfB6g53U2i4gfF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f2f2b7130-OSL
content-encoding: br
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
104.26.5.26200 OK 441 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 02:08:54 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4Msy4q8wuTOiWsL4BE8wTBE41S0RYLQj%2BKNj8tLzzhUCFGAmeeyjpuR8CgXaCUPygvjwC%2FXdxJIVDA0ssyWenukzEd0MKXgM4M5vPoZv7yIF2rJwJsweAg63VcSbRRZe3O523Ay"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f2f347130-OSL
content-encoding: br
X-Firefox-Spdy: h2
fstatic.netpub.media/renderer/prebid_240420.js
104.26.5.26200 OK 921 kB URL GET HTTP/2 fstatic.netpub.media/renderer/prebid_240420.js
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
File type JavaScript source, ASCII text, with very long lines (930), with CRLF line terminators
Size 921 kB (920662 bytes)
Hash ff3a241d1767b90dabbf718118f7e09f
042df8ca9c9df9a13844853d94c21d9f00b66eea
109f459cb3cc01a5123fce1966ed8fa031d87f70a491896ec43d28dbc7979a06
GET /renderer/prebid_240420.js HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 01:25:03 GMT
cache-control: max-age=14400
expires: Wed, 24 Apr 2024 17:47:44 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t8zxGI%2BDx0Q1rKXMzCOmufCTCgGDJs2UivaERhdma6r0OF0SI1bnbnEbP3ClDKurwCZCaOxzylHjUu9RfGOL75zTWZQQpxc%2BTGax%2BTnqVJ6OxaS0WGbg9iZD%2B3PchPoc1VguhAcu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb935d567130-OSL
content-encoding: br
X-Firefox-Spdy: h2
fstatic.netpub.media/extra/cmp/cmp-gdpr.js?v=1
104.26.5.26301 Moved Permanently 641 B URL GET HTTP/2 fstatic.netpub.media/extra/cmp/cmp-gdpr.js?v=1
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /extra/cmp/cmp-gdpr.js?v=1 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pwrpa.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 17:47:44 GMT
content-type: text/html; charset=iso-8859-1
location: https://cmp.netpub.media/init.js?v=1
cache-control: max-age=172800
expires: Wed, 24 Apr 2024 20:59:47 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cf-cache-status: HIT
age: 161277
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NBVDXFZoQF8kzekktWSD76JgFmvQD%2BuHifGyDLJy7JJWF%2FxTVqz2Cv8hu0K1LrjHfWVMYBK6MoaCLYEampFPJASICJ7NPiIjGyCKDzvfjMshGemfArAApi2JXvKSGBbcr10zNx1j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797eb90991c7130-OSL
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
104.26.5.26200 OK 441 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 02:08:54 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aqEOzmAviBwrtey3tAR2DBGCh%2BiqA6H3qeygd63uXtmF%2FcqHoE5oepyXKB53hw16F9cuuyNHorQnpAtr9FN4RwkV30q5nWhxIi1atq%2BYF1%2BBab98WpSIou1qEgCimDtqHGcJVj1y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f3f3f7130-OSL
content-encoding: br
X-Firefox-Spdy: h2
fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
104.26.5.26200 OK 441 kB URL GET HTTP/2 fstatic.netpub.media/r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4
IP 104.26.5.26:443
Certificate IssuerGoogle Trust Services LLC
Subjectnetpub.media
Fingerprint14:E5:55:2B:FB:5D:62:38:AA:FD:9E:ED:8B:E7:62:81:CD:BD:B6:F7
ValiditySun, 10 Mar 2024 02:23:45 GMT - Sat, 08 Jun 2024 02:23:44 GMT
Size 441 kB (440597 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/f009b805e4e5b31f4fa4ac2853b6a2f5/3db80515.js?npr=a98cd2456c8307b59a0cd4c8abdfc7e4 HTTP/1.1
Host: fstatic.netpub.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pwrpa.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:47:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 20 Apr 2024 02:08:54 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
cache-control: max-age=2678400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2Be5kyCVTIFaVRzfniIYmA8Zdsp1wNDbtLzBWtSv73EL%2FBBqcZD0So%2Ft7iIGgOxUupeFdKi8e2S2h4WILyPcgr0dEqkoeBrZE0lo3Pm6ItqsHn%2FkbEoCpFRyMuDgOB8G3mNeI2C6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797eb8f3f407130-OSL
content-encoding: br
X-Firefox-Spdy: h2