r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8600
Expires: Mon, 16 Jan 2023 23:29:18 GMT
Date: Mon, 16 Jan 2023 21:05:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3048
Expires: Mon, 16 Jan 2023 21:56:46 GMT
Date: Mon, 16 Jan 2023 21:05:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4540
Expires: Mon, 16 Jan 2023 22:21:38 GMT
Date: Mon, 16 Jan 2023 21:05:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 16 Jan 2023 20:42:12 GMT
content-type: application/json
age: 1426
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: u/wWRDfa0+GGHOOLmnDikpNdMChCxR08IWT38y4piUD5xFJ6a09niKIcnqD1LezGEu8tmBU/B9s=
x-amz-request-id: Z729Y51MWWY6V03N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 16 Jan 2023 20:44:43 GMT
age: 1275
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jan 2023 21:05:58 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
arep.co/1c340f7c23e425ad3bf8f4ac7f37cb65/unlock
301 Moved Permanently 162 B URL HTTP/1.1 arep.co/1c340f7c23e425ad3bf8f4ac7f37cb65/unlock
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /1c340f7c23e425ad3bf8f4ac7f37cb65/unlock HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 16 Jan 2023 21:05:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://arep.co/1c340f7c23e425ad3bf8f4ac7f37cb65/unlock
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 16 Jan 2023 20:17:25 GMT
age: 2913
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2477
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:05:59 GMT
Last-Modified: Mon, 16 Jan 2023 20:24:42 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rcp1NjecGpZuAlVnIRN/pQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 87LG1qPp6/k86+U1KcWV8JpsnlU=
arep.co/1c340f7c23e425ad3bf8f4ac7f37cb65/unlock
302 Found 0 B URL HTTP/1.1 arep.co/1c340f7c23e425ad3bf8f4ac7f37cb65/unlock
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1c340f7c23e425ad3bf8f4ac7f37cb65/unlock HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 16 Jan 2023 21:05:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Etag: "bcrypt+sha512$a676f6baa1a46c38950a4742363f0d1d$4$3c9d37caca7a7e0686ba70484be2ba5e50dc85364f09119e"
Vary: Accept
Location: https://arep.co/byTssz/unlock
Set-Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzU5LCJpYXQiOjE2NzM5MDMxNTl9.iY3Mkk5vD9DFjcFaSgdojZ4xXSQ72swWbB19ZpU92Dc;Path=/;Max-Age=920160;Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type
Access-Control-Expose-Headers: X-Auth-Token
arep.co/byTssz/unlock
200 OK 2.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2157)
Hash 399d2cb6e55f02847e1298edee551b8e
5448aa2396210c7bd4fbdeefc1555ddfb13294b2
20bca36eecc70b97c75cd8f5706719d5bdefc2889c67b2e448da20241bdf9df3
GET /byTssz/unlock HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzU5LCJpYXQiOjE2NzM5MDMxNTl9.iY3Mkk5vD9DFjcFaSgdojZ4xXSQ72swWbB19ZpU92Dc
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 21:05:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"bcrypt+sha512$9d32e4636b0acd42d834125a4c74988f$4$47e74b2b7cdf33c4fd6e60acc52011a2fad068856c522e66"
Vary: Accept-Encoding, Accept
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type
Access-Control-Expose-Headers: X-Auth-Token
Content-Encoding: gzip
cdn.polyfill.io/v2/polyfill.min.js?features=default,fetch
200 OK 126 B URL HTTP/2 cdn.polyfill.io/v2/polyfill.min.js?features=default,fetch
IP
Hash 73facef13260d15915b31c39a22317b8
2e0d6642d943b6bba33c14ed89db6ca0d98e7844
fe0e7a42051b9bde30f5d3f6679756e2aad5814be1914d6606d961f6e15f07f7
GET /v2/polyfill.min.js?features=default,fetch HTTP/1.1
Host: cdn.polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=UTF-8
last-modified: Wed, 11 Jan 2023 11:21:48 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Mon, 16 Jan 2023 21:06:00 GMT
vary: User-Agent, Accept-Encoding
server-timing: PASS, fastly;desc="Edge time";dur=16
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 126
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 3000daa296078f5c56c1c26223a14f51
78f133f5b3c715714409fda635df6356c8d5b155
9c8310f5c4a5e0d69109ca9a2b321fabebbc9fd2720d818464ab16234855e2f4
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:06:00 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "3A01269D713A8DE38EFD84401D5266060EE105B4"
Expires: Tue, 17 Jan 2023 07:00:00 GMT
Last-Modified: Mon, 16 Jan 2023 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2458
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78a9cfffac5a0afe-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79f45c828bcf1579157e07b09a6e33c0
37978dbbaf317b2e75bb33029452c892e48cd066
ea0537038a89b65edb180d6fe383683d1954fb95f171fb4a4b7922b97101c2f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c4c208-1d7"
Last-Modified: Mon, 16 Jan 2023 21:05:46 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8ABZrBeZ896aYk3GMMvtmQtVuofKe_yDBaAwHjxCZPfFpdmrpSzH_w==
Age: 14
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79f45c828bcf1579157e07b09a6e33c0
37978dbbaf317b2e75bb33029452c892e48cd066
ea0537038a89b65edb180d6fe383683d1954fb95f171fb4a4b7922b97101c2f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 16 Jan 2023 21:06:00 GMT
Last-Modified: Mon, 16 Jan 2023 20:13:17 GMT
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5RTLWFJ1mi7u5a8iN5uqnwR4AbXUeK1K85V22RiTOO1TiRsOwujAjQ==
Age: 3164
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79f45c828bcf1579157e07b09a6e33c0
37978dbbaf317b2e75bb33029452c892e48cd066
ea0537038a89b65edb180d6fe383683d1954fb95f171fb4a4b7922b97101c2f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109701
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c4c208-1d7"
Expires: Wed, 18 Jan 2023 03:34:21 GMT
Last-Modified: Mon, 16 Jan 2023 03:18:32 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vgJ7Uad68ZeMeVwmvpkcV5TJNnp3jy5HJK_Z73eVZvgCUVlC59lPGw==
Age: 949
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79f45c828bcf1579157e07b09a6e33c0
37978dbbaf317b2e75bb33029452c892e48cd066
ea0537038a89b65edb180d6fe383683d1954fb95f171fb4a4b7922b97101c2f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108752
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c4c208-1d7"
Expires: Wed, 18 Jan 2023 03:18:32 GMT
Last-Modified: Mon, 16 Jan 2023 03:18:32 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yQtwfJyh1bz2h1-rTIynTphb85DU5UPpnIcW7xPlhsPfr-_RGyO_DQ==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79f45c828bcf1579157e07b09a6e33c0
37978dbbaf317b2e75bb33029452c892e48cd066
ea0537038a89b65edb180d6fe383683d1954fb95f171fb4a4b7922b97101c2f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111308
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c4c208-1d7"
Expires: Wed, 18 Jan 2023 04:01:08 GMT
Last-Modified: Mon, 16 Jan 2023 03:18:32 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3aivhfvtF_d8DOU3lgdYUnVpFdEC5UaENL1H07F-l2hiKfZsc8O0tw==
Age: 2556
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15818
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 21:06:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15818
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 21:06:00 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15818
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 21:06:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2fb3ba8-a85e-42ba-b607-87ced36844b2.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2fb3ba8-a85e-42ba-b607-87ced36844b2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 542f87ebb35e170451b610e4b700bcb1
2259cdebacc4c9f07aad838eec494863d4273ad1
85001f2cf33f3fc98d4cdcc7aef38611e34aea3a791d8acb0a5946c4619398eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2fb3ba8-a85e-42ba-b607-87ced36844b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5766
x-amzn-requestid: b6a8d7ee-ff35-4720-8d2e-ba2b8db6edfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ezbP4GDQIAMFTSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c47265-6022a62f69d8f938458d18a0;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 21:38:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YcIDYSEtEIIfGauNxD9V1tuSCAPDq9OaaAATRTOC3Sjlb-72IA0ScQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 22:02:24 GMT
age: 83016
etag: "2259cdebacc4c9f07aad838eec494863d4273ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdba5086-6c46-4cc7-9087-e85f89cbe947.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdba5086-6c46-4cc7-9087-e85f89cbe947.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad1a79b09348c4959a8ac05513efcb78
10c0a66add63c868ff332022f588e65f4ac1ec15
8a123746389e6b480669b8d6882f7edce290f1c226cd6744e23bac94b8de6d32
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdba5086-6c46-4cc7-9087-e85f89cbe947.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9176
x-amzn-requestid: 1d5746ff-7de6-4a54-87d2-d15330d1bb58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: etlL8HiPoAMFrIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c21be5-044d012445cf23c01cb07a89;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 03:05:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rlWcTZTEG0kynoJM9bd9eba8kiPvodkF7ewyDV7JaR9qPjiNMApa1g==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 00:20:11 GMT
age: 74749
etag: "10c0a66add63c868ff332022f588e65f4ac1ec15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 74ac30be02dee9dcfeee79a7dc54edff
1368d81de22ea2e4054a3e1a8f01ef337c63e35b
8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUFicgD94yxyZhMtQm-aYS-QpZXn07rLRBhnBLMTIQh6qHKOX_LRFg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 04:24:02 GMT
age: 60118
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91a664271b9042ab5a34c1259df6ab93
7ce177939ceed31dbe137996cace3f71eaab3cf4
08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11285
x-amzn-requestid: 46c0b124-5916-4067-99af-2fa9812dfb2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ev-1zHc4oAMFV6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c311be-3ffbee9348f4351459ed0099;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 20:34:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xvBnmF39Og8Zbf9xZ0IjC0Kd5cIYRc4ONYqolYdxxmzS8i-K2REYSA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 04:56:54 GMT
age: 58146
etag: "7ce177939ceed31dbe137996cace3f71eaab3cf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.arep.co/b1997ae.js
200 OK 76 kB IP
Hash b1677c1c9aacf0e29c0d483a800bc1e8
b7207775b4e66debd191a4e3afc0309b08e2e866
bc0935c4ef688352e85289f6aba201c16c9996b7ab10c9a4899aafbcbb3910cb
GET /b1997ae.js HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 08 Nov 2022 03:09:20 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:02 GMT
etag: W/"d3f3217a3779d37e92217b12b81acad6"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3mCZQT3RscAOTvG-RFx5QFBWiMryElddSggCBa-oAwlAOo-K0KPVHg==
age: 6026201
X-Firefox-Spdy: h2
cdn.arep.co/75abacb.js
200 OK 7.5 kB IP
Hash 2efb16bd1ed747e43ef8d88ce7a0dd86
d405d2da6d164799df3d25a33d42c96d2d239337
0e2b1e063ed17b126b63e35c3fe8c1219f6c4ba31e934007975d3c48242b4761
GET /75abacb.js HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 08 Nov 2022 03:09:21 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:02 GMT
etag: W/"865b932e6156f00c092105a75adc390c"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -8Hr8WEAaiehczbPrOj4Rxp17AWOQj22wcMGfWtgYoRk1CmgCR-uiQ==
age: 6026200
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 2debda41ab80e3d39109febda7efa61c
b19f205253e7fe358a8f0c9a8c19cfba8b3544fa
3fbefb9d26ab11a0a32ce44550d1e9cb86165f110e67e78b2d1d53710f357ee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6383
Cache-Control: max-age=98591
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c48168-2d7"
Expires: Wed, 18 Jan 2023 00:29:11 GMT
Last-Modified: Sun, 15 Jan 2023 22:42:48 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 727
cdn.arep.co/img/favicon/favicon.ico
200 OK 15 kB URL HTTP/2 cdn.arep.co/img/favicon/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 32c1928212c65f839af9b11702a5b7dc
b7506744d4efb9bc5490069d1a42dc8d0e83ecbb
ac3b738118632ba715c728d20ea381829075334583197c8b643b37097d86d2db
GET /img/favicon/favicon.ico HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15086
last-modified: Tue, 08 Nov 2022 02:57:06 GMT
server: AmazonS3
date: Mon, 16 Jan 2023 03:24:48 GMT
etag: "32c1928212c65f839af9b11702a5b7dc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dXVPVDtkEhppI174cQuLdu115yHXywvi5sN-rds9HR_bblEMa5NEjg==
age: 63673
X-Firefox-Spdy: h2
cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
IP
File type ASCII text, with very long lines (755)
Hash caa762087e9d75cecc34b5d6626cb7b9
fcc68d485c2f42e0f880260c3e104cedf50d0d11
dc0ec55efae4c1f0ff095cf05133cc835e1cc4ff7906d3b7a2d0d86789bfe145
GET /libs/mixpanel-2-latest.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvjgqZU9-BMf9MCS4sLp8F54451xKAvA3EaLzWSmuF4VYkiXL5I2Z84MYa6ajupVUtmdKqD9HWGWYec7lKLhmrmOi-5O47s
x-goog-generation: 1645129310876382
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=PPVzJA==, md5=yqdiCH6ddc7MNLXWYmy3uQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Mon, 16 Jan 2023 21:04:02 GMT
expires: Mon, 16 Jan 2023 21:14:02 GMT
cache-control: public,max-age=600
age: 118
last-modified: Thu, 17 Feb 2022 20:21:50 GMT
etag: "caa762087e9d75cecc34b5d6626cb7b9"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 2debda41ab80e3d39109febda7efa61c
b19f205253e7fe358a8f0c9a8c19cfba8b3544fa
3fbefb9d26ab11a0a32ce44550d1e9cb86165f110e67e78b2d1d53710f357ee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6383
Cache-Control: max-age=98591
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:00 GMT
Etag: "63c48168-2d7"
Expires: Wed, 18 Jan 2023 00:29:11 GMT
Last-Modified: Sun, 15 Jan 2023 22:42:48 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 727
arep.co/api/v1/cn/campaign-uri?$filter=uri%3D%2FbyTssz%2Funlock
200 OK 4.6 kB URL HTTP/1.1 arep.co/api/v1/cn/campaign-uri?$filter=uri%3D%2FbyTssz%2Funlock
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (15546), with no line terminators
Hash 699d11e8e8687c6e672598ae2df527fa
800b5ec6e58a98725c447d61676dca92b7cba09f
8061c7512d2df30aef721c7edb117b2aeb6863920b6f88a042d0dc1d9fdcf7e4
GET /api/v1/cn/campaign-uri?$filter=uri%3D%2FbyTssz%2Funlock HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/byTssz/unlock
Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzU5LCJpYXQiOjE2NzM5MDMxNTl9.iY3Mkk5vD9DFjcFaSgdojZ4xXSQ72swWbB19ZpU92Dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 21:06:01 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type,ETag
Access-Control-Expose-Headers: X-Auth-Token,ETag
Content-Encoding: gzip
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq
200 OK 1.2 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2359)
Hash 2d4474d72123b4c1a03fdefb5bdb4ad6
3280534829e3eb3ce1e530b8fd397ab9cbe6ed3e
98cdcebe2e48648ecf892714758fda21ace62480f999fcc354747889e401c473
GET /i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202301162106017DACB6A4A15C4287F076
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60fa52c5d1c57f3b77a3dac2d549caf6cf1942d5e4cfbe29e2f50fe5a0b3c2b4a7e49ef69805088a51f3e408101cab7bf74a753e4a2f73b99b3ac33a21c8168f6562d6341731a8baba235ac69998ba0b5df7c67f77362318b371e0c9d3381ee8ab
content-encoding: gzip
content-length: 1159
x-origin-response-time: 11,23.194.131.85
x-akamai-request-id: 21c5a6d3.37c08915
expires: Mon, 16 Jan 2023 21:06:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 16 Jan 2023 21:06:01 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KQO65lHHAIX30mY56ni8knOcxd; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-194-131-85.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=103, origin; dur=11, inner; dur=2
x-parent-response-time: 114,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash e470cdee4fb19533b3076cf5e6445ff0
3fa761e875d60e55f5464f0cee6207bca0d2cbed
e7fa855a1d974007175332f96be3ec95d6c6b94f7f4180dac64e4cf7d3d7115a
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Cookie: _ttp=2KQO65lHHAIX30mY56ni8knOcxd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175829D91E25D7003EA9A803DC
x-tt-trace-host: 01f6175df718ab226765794aaab21df67154f0b53b7f693af896ad93db0deb0ef832d63bb31438f0c5e0aa4878e941bb88c0976593910f5ab417b5ca255605e18e5e0fd52686d843afbd593b8bd0d366fe4ffb20082da9c196e6db1f01a9ce8992
content-encoding: gzip
date: Mon, 16 Jan 2023 21:06:01 GMT
content-length: 70411
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 37c08abc
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq
200 OK 1.2 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2359)
Hash cdbbc5f0127f0bcbca8bcf2e7d82d625
29222ff699b482bea05f8eb29ddd913dcd597ca4
3a66d828441892f16018d202c314e8e7506064610f6f4cf699814dc82131aef5
GET /i18n/pixel/events.js?sdkid=CEQFF7JC77UA35R5C1E0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230116210601D8B64A2429C1565DF854
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca1017a62155cfc5d688040557d9f3b94d64fd12a3f998c61572c743ca727a702ca341a1b91fdcdef2e334eedf91feab86e05e73fa4522e6beb485f356cc4eb377e
content-encoding: gzip
expires: Mon, 16 Jan 2023 21:06:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 16 Jan 2023 21:06:01 GMT
content-length: 1159
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KQO64NvLzI2LMHyGZWMFErGE6P; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=2, cdn-cache; desc=MISS, edge; dur=1, origin; dur=104
x-origin-response-time: 104,23.36.79.28
x-akamai-request-id: 37c08a8d
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85bd96a56a6a7f09e3e7dadc7980152e
37590c595abeb315046a293a9e53632ae2128ac4
c27be18eef006f48310fb2b0c456d6bcb1f3b0298dcb6e580724923323cb48a7
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Cookie: _ttp=2KQO64NvLzI2LMHyGZWMFErGE6P
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825D19F86481431D6BBCCFF
x-tt-trace-host: 012b38305f60bfa8a9f04bdd846fde846b507e69fff233d9a114d447ebe9f93c0f827e6bc0806bd5a24cf0439744099e1e4bba0637571d8edb56c6009f69fe5018b8e38bd5b93708ee64c377fa97874d18ceefbea8a477a7fa2bec40c3b56c69b1
content-encoding: gzip
date: Mon, 16 Jan 2023 21:06:01 GMT
content-length: 30917
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 37c08c7f
X-Firefox-Spdy: h2
arep.co/api/v1/cn/campaign-account
201 Created 17 B URL HTTP/1.1 arep.co/api/v1/cn/campaign-account
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 545dcc367d8cbb2957840052f1bd155b
359cada1518980d81459a607fbc546faff798d74
9b84885a749ba5d574c7d1b2b6660331cc228eb95ee7028ff6863fd81f3a64d3
POST /api/v1/cn/campaign-account HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 20
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/byTssz/unlock
Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzU5LCJpYXQiOjE2NzM5MDMxNTl9.iY3Mkk5vD9DFjcFaSgdojZ4xXSQ72swWbB19ZpU92Dc; mp_f69a408e00c65bd7df6a80939c06bc7a_mixpanel=%7B%22distinct_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24device_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _gcl_au=1.1.1546540043.1673903161; _ga_6L6KQ6S8T1=GS1.1.1673903161.1.0.1673903161.60.0.0; _ga=GA1.1.942427055.1673903161
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Server: nginx
Date: Mon, 16 Jan 2023 21:06:01 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 17
Connection: keep-alive
Vary: Accept
X-Auth-Token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzYxLCJpYXQiOjE2NzM5MDMxNjF9.987jviLdwAJTgfrH1yOJ9o5x0LwxvKcTUR35KYfL2gg
Set-Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzYxLCJpYXQiOjE2NzM5MDMxNjF9.987jviLdwAJTgfrH1yOJ9o5x0LwxvKcTUR35KYfL2gg;Path=/;Max-Age=920160;Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type,ETag
Access-Control-Expose-Headers: X-Auth-Token,ETag
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 770
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Cookie: _ttp=2KQO64NvLzI2LMHyGZWMFErGE6P
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230116210601361FC674F8C4718291CC
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf609587a2e3d11d4fef375749f7e00ea8a83315fc7085ad91ab6aba1b2043ebd05ad6ff36044ce0706c674d7f1d8d452bbe75cb03830d805ddc5bdeb447de5479d437df2f92ae08331166bec00c689c87845d34b685b2fa1eab87882c6e0236b1c6
x-origin-response-time: 22,23.48.36.236
x-akamai-request-id: 4e2d282d.37c08cc9
expires: Mon, 16 Jan 2023 21:06:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 16 Jan 2023 21:06:01 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-48-36-236.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=104, origin; dur=22, inner; dur=16
x-parent-response-time: 122,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 772
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Cookie: _ttp=2KQO64NvLzI2LMHyGZWMFErGE6P
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202301162106017F4E4B39AD79C06AA599
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1bebfd21a7bb34ea9756bafc0ab93ed1043b948114fec7c85abebf221e57d0bcf01cd464301c8fe4bff2dfbcf883d295f4e5ef98b6e4330a746e42bb1bf7f3071da6c8e74061079a1a5c2f9ad3176e355500
x-origin-response-time: 31,23.217.116.143
x-akamai-request-id: 5c528083.37c08ccf
expires: Mon, 16 Jan 2023 21:06:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 16 Jan 2023 21:06:01 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-217-116-143.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=104, origin; dur=31, inner; dur=16
x-parent-response-time: 131,23.36.79.28
X-Firefox-Spdy: h2
s.adroll.com/j/roundtrip.js
200 OK 18 kB URL HTTP/1.1 s.adroll.com/j/roundtrip.js
IP
File type ASCII text, with very long lines (1139)
Hash b412d434bb00b5f2bbd6122e81ed2316
bb441865849fd9f6924bf49a522d40fee3131c97
0ee56a3fd135b671fc20b9b3f1422fee39f0bb0566dd7a13b7dc056383feda9c
GET /j/roundtrip.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 11 Jan 2023 23:42:59 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: c46bE.9L1VPpk_2fDbiTiDKy4ZYsGJxp
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 16 Jan 2023 20:30:23 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"921666262b2234d4a4d129d30750823f"
Vary: Accept-Encoding
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
Age: 2173
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RAIkX3YAsojMChkpPRdmfPEbHpliSCOEgSPrBUg8FzecfoQrNmSgsg==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cd18c4a19cce4db4c1ee660e9a0a967
a60b429532788a57a53e8674de365ddd84fcf3e4
878401e98ec0ea4de88dad035d00618a4d3f382329f326711f3916b4325aab88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.arep.co/app.50909fe.css
200 OK 38 kB URL HTTP/2 cdn.arep.co/app.50909fe.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7c8f214a70d65e23122be9db84b854d6
df84a43b6a99cfafafeaedbd643fa3c490e1fdf8
757b6067f697ef1b035db944553fb2dfda77fde152dfbc0f6c1e63ccfbaa9622
GET /app.50909fe.css HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 08 Nov 2022 03:09:21 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:02 GMT
etag: W/"0c9c53225dc6d5cf4664e67d1562f4de"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9-waYcsNsC5vecZkcXIvfSoIZAAkSaE982F3iSzc1uDfWUW0j4IoUw==
age: 6026200
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0988e06d2698db0b1a5bcadbadba234a
515ca060583e340fec230fcf8e758352f4bc10a8
1a0dc461032c28c3e0e71daec9b2296e5b5c089e22785e7d7bee505d71e40127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2680
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Last-Modified: Mon, 16 Jan 2023 20:21:21 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9c27cc551532f9424a9c944b490c3c45
1da7d84941c2ac6ffe4dfdf044d96c5b07d38b11
ae4dcb0d9d7fd53177cefc7d6c4c4101af88a85a2970a4693b33217d8dfdcf48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 16 Jan 2023 21:06:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 16-Jan-2023 21:21:01 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 16 Jan 2023 21:06:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/11059160986/?random=1673903160985&cv=11&fst=1673903160985&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&label=FwqRCJ-4_YYYEJrPtZkp&hn=www.google.com&frm=0&url=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&tiba=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&value=0&bttype=purchase&auid=1546540043.1673903161&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.arep.co/6ca5805.js
200 OK 131 kB IP
Size 131 kB (131074 bytes)
Hash 779132e1111b264715ffc8dcc31b0266
b4bbcaa2f4053d36fae6b04f7062f3ff87d7964b
2ef4c4c6c80135bce6c3a7f716ec7ba4635c6d9f51d77ecfe1c574e85227ff17
GET /6ca5805.js HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 08 Nov 2022 03:09:21 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:02 GMT
etag: W/"bf02dc7aa770062438f1ad9d7ce8cf8a"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ytatQVzXifiiw7UFL5sRSYTiJvG3J3I0dlXKmTENqK_Ndx2SVMXu8A==
age: 6026200
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=794425894&t=pageview&_s=1&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&ul=en-us&de=UTF-8&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=338044392&gjid=1676242679&cid=942427055.1673903161&tid=UA-91177118-2&_gid=1101625487.1673903162&_r=1&_slc=1>m=2wg1a1PHDLGCL&z=1052129825
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=794425894&t=pageview&_s=1&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&ul=en-us&de=UTF-8&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=338044392&gjid=1676242679&cid=942427055.1673903161&tid=UA-91177118-2&_gid=1101625487.1673903162&_r=1&_slc=1>m=2wg1a1PHDLGCL&z=1052129825
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&a=794425894&t=pageview&_s=1&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&ul=en-us&de=UTF-8&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YADAAEABAAAAACAAI~&jid=338044392&gjid=1676242679&cid=942427055.1673903161&tid=UA-91177118-2&_gid=1101625487.1673903162&_r=1&_slc=1>m=2wg1a1PHDLGCL&z=1052129825 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://arep.co
date: Mon, 16 Jan 2023 21:06:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0988e06d2698db0b1a5bcadbadba234a
515ca060583e340fec230fcf8e758352f4bc10a8
1a0dc461032c28c3e0e71daec9b2296e5b5c089e22785e7d7bee505d71e40127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2680
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Last-Modified: Mon, 16 Jan 2023 20:21:21 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0cd18c4a19cce4db4c1ee660e9a0a967
a60b429532788a57a53e8674de365ddd84fcf3e4
878401e98ec0ea4de88dad035d00618a4d3f382329f326711f3916b4325aab88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a0c99efce2ba7294ef4b88e9810c411
90e325963c1355d4c2ab6500689850a2df4c419f
957f138460650b9cecf197fb62ec2b92fae42eb5d9d431a348f8f518470612c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9c27cc551532f9424a9c944b490c3c45
1da7d84941c2ac6ffe4dfdf044d96c5b07d38b11
ae4dcb0d9d7fd53177cefc7d6c4c4101af88a85a2970a4693b33217d8dfdcf48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Sat, 03 Dec 2022 04:42:02 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZYhxMV3epxiKxOB3cDfQo71gl4k8CrJHw2W1CBKoQGVN9fb_Cevctg==
age: 3860639
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 80da883a1386f667df455f7dfb950534
b416dcd104aaacd43ced31fa12f28fb1bfec0c5e
7c6916978782fdd9c1cd9511489caa40fd221aaac55eaf914b6e61362690892b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92905
Date: Mon, 16 Jan 2023 21:06:01 GMT
Etag: "63c47e90-1d7"
Expires: Tue, 17 Jan 2023 22:54:26 GMT
Last-Modified: Sun, 15 Jan 2023 22:30:40 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qlhH8v5Y4_33em5iPceEmQQK-5_FaS42wi0tVMv5hECFVTHjaRDjmg==
Age: 1427
region1.analytics.google.com/g/collect?v=2&tid=G-6L6KQ6S8T1>m=2oe1a1&_p=794425894&_gaz=1&cid=942427055.1673903161&ul=en-us&sr=1280x1024&_s=1&sid=1673903161&sct=1&seg=0&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-6L6KQ6S8T1>m=2oe1a1&_p=794425894&_gaz=1&cid=942427055.1673903161&ul=en-us&sr=1280x1024&_s=1&sid=1673903161&sct=1&seg=0&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6L6KQ6S8T1>m=2oe1a1&_p=794425894&_gaz=1&cid=942427055.1673903161&ul=en-us&sr=1280x1024&_s=1&sid=1673903161&sct=1&seg=0&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&dt=Snow%20Machine%20Queenstown%3A%20Register%20for%20Presale%20Access%20%26%20WIN%20a%20trip%20for%202%20to%20Queenstown!&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://arep.co
date: Mon, 16 Jan 2023 21:06:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.arep.co/vendors/app.c41746f.css
200 OK 9.7 kB URL HTTP/2 cdn.arep.co/vendors/app.c41746f.css
IP
Hash 25c35e4af7e2018cd5a7a34783d2e67c
50e355468e9787ba1e573823b3c21ed7d2cdc58a
98968f4163b3225a36fc8934cf5f9250b6c1e8de26530153bf9ea0ebd88b0405
GET /vendors/app.c41746f.css HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 08 Nov 2022 03:09:20 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:03 GMT
etag: W/"b5fd57ea75c40271af205a84849d64b2"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vdE_lY4Geqs0-m2cLZiyAq6g2FQ5MuoM5mILPTAU-dlYUg-F7hFWtg==
age: 6026200
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46016837fa657816c9759b877cfd0a84
a2d7e97f1f2e86c2889af087fbd569177eca7958
4ff15623841a08fe9936578c1d95aeb2a1c5c9942cae7a4881f35f79430a1735
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
arep.co/api/v1/cn/campaign-fan/6255
200 OK 847 B URL HTTP/1.1 arep.co/api/v1/cn/campaign-fan/6255
IP
File type JSON data\012- , ASCII text, with very long lines (1603), with no line terminators
Hash 990e9cef6a1329388362ddbff7335c7e
397fa9d714082b5fc8e89b21f3ca535b0bcd710a
aba542fae337f769d6877765b0326e30305e88e5147ffe69626267d0266c4fb1
GET /api/v1/cn/campaign-fan/6255 HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/byTssz/unlock
Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzYxLCJpYXQiOjE2NzM5MDMxNjF9.987jviLdwAJTgfrH1yOJ9o5x0LwxvKcTUR35KYfL2gg; mp_f69a408e00c65bd7df6a80939c06bc7a_mixpanel=%7B%22distinct_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24device_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _gcl_au=1.1.1546540043.1673903161; _ga_6L6KQ6S8T1=GS1.1.1673903161.1.0.1673903161.60.0.0; _ga=GA1.1.942427055.1673903161; _tt_enable_cookie=1; _ttp=J8VfV5XnN8jP95bicwfv_HuuZq1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 21:06:01 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type,ETag
Access-Control-Expose-Headers: X-Auth-Token,ETag
Content-Encoding: gzip
s.adroll.com/j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/fpconsent.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/fpconsent.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/fpconsent.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Mon, 16 Jan 2023 12:01:00 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/pre/index.js
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
Age: 32701
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tMZ1Rg8MEHuXhAJbT_kp-elqg2jWuLMvJo3Xpayxjt05_MP1aA_I4g==
d.adroll.com/consent/check/OO34ZDJ3MVDALF3UYRBB6W?pv=92911444851.80354&arrfrr=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&_s=dd1fe8f0d6602a9fa5e8f4b999deeea6&_b=2
200 OK 462 B URL HTTP/2 d.adroll.com/consent/check/OO34ZDJ3MVDALF3UYRBB6W?pv=92911444851.80354&arrfrr=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&_s=dd1fe8f0d6602a9fa5e8f4b999deeea6&_b=2
IP
File type ASCII text, with very long lines (462), with no line terminators
Hash 42f4f967ab3d3b0677442d24c61c5427
511cb590178831c05f9a00cbca37f8dd5800f6af
19ba231467ea1d3e47295bce48f8f9a015d4271cdc3a6770d2617dc2a28a063c
GET /consent/check/OO34ZDJ3MVDALF3UYRBB6W?pv=92911444851.80354&arrfrr=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&_s=dd1fe8f0d6602a9fa5e8f4b999deeea6&_b=2 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:06:01 GMT
content-type: application/javascript
content-length: 462
server: nginx/1.22.0
X-Firefox-Spdy: h2
script.hotjar.com/modules.2258f2bad9aa53d2a0c2.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.2258f2bad9aa53d2a0c2.js
IP
File type Unicode text, UTF-8 text, with very long lines (47958)
Hash 8b2164bedd368c1837c7e4740cf4a11d
c6c175da5a097facb732f957317109d6d543027c
ca0c50638ea183d9dd38b303682f1e2ca6307e1b8a7a5dbdae919d8ef4793f61
GET /modules.2258f2bad9aa53d2a0c2.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 69014
date: Mon, 16 Jan 2023 11:14:05 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "8b2164bedd368c1837c7e4740cf4a11d"
last-modified: Mon, 16 Jan 2023 11:14:05 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kHAYALl51yLE3Xe22GdEQUdl2fRXoaqYfIYzc7PBr9_QpZCKe3tOaw==
age: 35515
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-6L6KQ6S8T1&cid=942427055.1673903161>m=2oe1a1&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-6L6KQ6S8T1&cid=942427055.1673903161>m=2oe1a1&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6L6KQ6S8T1&cid=942427055.1673903161>m=2oe1a1&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://arep.co
date: Mon, 16 Jan 2023 21:06:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.adroll.com/j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/OO34ZDJ3MVDALF3UYRBB6W/TP7FSYIOQNGTNAVQNCUWHO/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 11 Jan 2023 22:29:02 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: OXS6WoCrVacfBb6wVdZSg3uu4crxSnJS
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 16 Jan 2023 20:54:58 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
Age: 664
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U2AXRPgEFxuuo0oJ4GAyuTTv4Y50_y4x1qF8lUuYF8xvMtnmJ2wHfw==
s.adroll.com/j/exp/OO34ZDJ3MVDALF3UYRBB6W/index.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/exp/OO34ZDJ3MVDALF3UYRBB6W/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/exp/OO34ZDJ3MVDALF3UYRBB6W/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Mon, 16 Jan 2023 07:52:03 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
Age: 47637
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lGRcZZOfYnp1sesiP7989K3SsmpXKjawRMQZMNciBes1wKme8mfcGw==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46016837fa657816c9759b877cfd0a84
a2d7e97f1f2e86c2889af087fbd569177eca7958
4ff15623841a08fe9936578c1d95aeb2a1c5c9942cae7a4881f35f79430a1735
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.arep.co/fonts/Graphik/Graphik-Medium-Web.woff2
200 OK 33 kB URL HTTP/2 cdn.arep.co/fonts/Graphik/Graphik-Medium-Web.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33401, version 1.0\012- data
Hash ae4a5ff7da4a141f4c396cfb6cae8e2e
fe3332c7e2d3ec5f93071f107d74e3a986afcedd
57a9cc40cbf28d1d0a01679a4f8683fb5a57d0fabfac3c4532610698d518ae5c
GET /fonts/Graphik/Graphik-Medium-Web.woff2 HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://arep.co
Connection: keep-alive
Referer: https://cdn.arep.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 33401
date: Mon, 16 Jan 2023 07:47:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Tue, 08 Nov 2022 02:57:05 GMT
etag: "ae4a5ff7da4a141f4c396cfb6cae8e2e"
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2F7pFa6LIXPFUz1nRLT4Sjb__cGMeLfFNHMrHs2HbkAUS-TSo3gyxw==
age: 47912
X-Firefox-Spdy: h2
cdn.arep.co/fonts/Graphik/Graphik-Regular-Web.woff2
200 OK 30 kB URL HTTP/2 cdn.arep.co/fonts/Graphik/Graphik-Regular-Web.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30241, version 1.0\012- data
Hash 3360447f6bf82bef8bf8234d4d60f494
c1f1f25814f684082844abe29ed066a65db8f9bb
c0aff37dfc576576f78bd55948e4251dc6986f88c058369e0212387ff52efb7e
GET /fonts/Graphik/Graphik-Regular-Web.woff2 HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://arep.co
Connection: keep-alive
Referer: https://cdn.arep.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 30241
date: Mon, 16 Jan 2023 07:47:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Tue, 08 Nov 2022 02:57:05 GMT
etag: "3360447f6bf82bef8bf8234d4d60f494"
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pWAs9v6C98IegfOUVp0UacDseNTCElZQ5igbFOtvSGtItWCT-T4xvw==
age: 47912
X-Firefox-Spdy: h2
arep-ui-cdn.arep.co/1.0.0/fonts/Graphik-Medium.woff2
200 OK 37 kB URL HTTP/2 arep-ui-cdn.arep.co/1.0.0/fonts/Graphik-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 36992, version 1.0\012- data
Hash 8209b58fb591ea988389291a97e4d232
cd8d57cb8fabbefd2f71dd9ab61e93b8722741f2
65abe0fc15bbb17b4fa09fa806f2c22c5f78e004c95bb8272e5c84f0b128a495
GET /1.0.0/fonts/Graphik-Medium.woff2 HTTP/1.1
Host: arep-ui-cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://arep.co
Connection: keep-alive
Referer: https://cdn.arep.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 36992
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, HEAD
last-modified: Tue, 13 Oct 2020 05:55:38 GMT
server: AmazonS3
date: Mon, 16 Jan 2023 06:43:30 GMT
etag: "8209b58fb591ea988389291a97e4d232"
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XffrX7iw_77Hm6wYMP_fM0spnaSk2yeeEmDFmv65HUHwzRfbVPW0uw==
age: 51753
X-Firefox-Spdy: h2
media-assets.arep.co/promoter/9753/6b2d9f5b-2308-4d31-8d16-f6b95f9830d4-prize-image.png
200 OK 421 kB URL HTTP/2 media-assets.arep.co/promoter/9753/6b2d9f5b-2308-4d31-8d16-f6b95f9830d4-prize-image.png
IP
File type PNG image data, 1200 x 628, 8-bit/color RGBA, non-interlaced\012- data
Size 421 kB (421023 bytes)
Hash 7039d7a493e3a5e5fd4ec033b979ad9b
b7a576ab66d2b03e8897c86bf249ec896afc2f2f
833f136d4b8a30a3fe8f7fdc7791f41a0bd56c5f032da01d49188c99ee2bee30
GET /promoter/9753/6b2d9f5b-2308-4d31-8d16-f6b95f9830d4-prize-image.png HTTP/1.1
Host: media-assets.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Cookie: mp_f69a408e00c65bd7df6a80939c06bc7a_mixpanel=%7B%22distinct_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24device_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _gcl_au=1.1.1546540043.1673903161; _ga_6L6KQ6S8T1=GS1.1.1673903161.1.0.1673903161.60.0.0; _ga=GA1.2.942427055.1673903161; _tt_enable_cookie=1; _ttp=J8VfV5XnN8jP95bicwfv_HuuZq1; _gid=GA1.2.1101625487.1673903162; _gat_UA-91177118-2=1; _fbp=fb.1.1673903162256.1590285714
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 421023
last-modified: Mon, 09 Jan 2023 21:37:44 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 16 Jan 2023 21:06:02 GMT
etag: "7039d7a493e3a5e5fd4ec033b979ad9b"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1W9WbrGLPS6rUjLjleSiqz_lhDRmNaYhRFDI32-mz7b0mIpcytEwPg==
age: 53753
X-Firefox-Spdy: h2
media-assets.arep.co/promoter/9753/9851d781-10de-4bbf-961e-bcf73dd6e262-prize-image.png
200 OK 429 kB URL HTTP/2 media-assets.arep.co/promoter/9753/9851d781-10de-4bbf-961e-bcf73dd6e262-prize-image.png
IP
File type PNG image data, 1200 x 628, 8-bit/color RGBA, non-interlaced\012- data
Size 429 kB (428961 bytes)
Hash c40f1e88a6075bb0b52cf3f34876ff1e
318eb1324e8883d0f6c9100c6bae5ef6bcc76162
fc9f94627c0dbe3d4b38253acb128c396b5014ea8f97abf1e07e5ce8a2322367
GET /promoter/9753/9851d781-10de-4bbf-961e-bcf73dd6e262-prize-image.png HTTP/1.1
Host: media-assets.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Cookie: mp_f69a408e00c65bd7df6a80939c06bc7a_mixpanel=%7B%22distinct_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24device_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _gcl_au=1.1.1546540043.1673903161; _ga_6L6KQ6S8T1=GS1.1.1673903161.1.0.1673903161.60.0.0; _ga=GA1.2.942427055.1673903161; _tt_enable_cookie=1; _ttp=J8VfV5XnN8jP95bicwfv_HuuZq1; _gid=GA1.2.1101625487.1673903162; _gat_UA-91177118-2=1; _fbp=fb.1.1673903162256.1590285714
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 428961
last-modified: Mon, 09 Jan 2023 21:37:36 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 16 Jan 2023 21:06:02 GMT
etag: "c40f1e88a6075bb0b52cf3f34876ff1e"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dy46q2ANA-TxA33X9y-08WdONwYGueUW_WW9szLunZUF1KIdz6nfHA==
age: 82034
X-Firefox-Spdy: h2
arep.co/api/v1/cn/campaign-page-view
201 Created 444 B URL HTTP/1.1 arep.co/api/v1/cn/campaign-page-view
IP
File type JSON data\012- , ASCII text, with very long lines (444), with no line terminators
Hash fb894b3b5fd88aaa7d37084a0b697cb6
c6931443d374aeb3643c2513cb6436a2e9899671
acc7a4c931a3e7db154703e3253d42005ab2bbc41f6100108a154b3365cc4d1f
POST /api/v1/cn/campaign-page-view HTTP/1.1
Host: arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 52
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/byTssz/unlock
Cookie: _ar_fan_auth_token_=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyLXJlY29yZC1zdHJpbmciOiJ7OmFjY291bnQtaWQgMjE0NTI3NDI0LCA6YWNjb3VudC10eXBlIFwiRkFOXCJ9IiwiY2xpZW50LWlkZW50aXR5Ijoie1wiYWNjb3VudElkXCI6MjE0NTI3NDI0LFwiYWNjb3VudFR5cGVcIjpcIkZBTlwifSIsIm1hc3F1ZXJhZGVyLXJlY29yZC1zdHJpbmciOm51bGwsImF1dGgtc2NoZW1lIjoibG9naW4iLCJzdWIiOjIxNDUyNzQyNCwiZXhwIjoxNzI5MTEyNzYxLCJpYXQiOjE2NzM5MDMxNjF9.987jviLdwAJTgfrH1yOJ9o5x0LwxvKcTUR35KYfL2gg; mp_f69a408e00c65bd7df6a80939c06bc7a_mixpanel=%7B%22distinct_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24device_id%22%3A%20%22185bc673e7c267-0d82226bdf24c2-c505425-140000-185bc673e7d47f%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D; _gcl_au=1.1.1546540043.1673903161; _ga_6L6KQ6S8T1=GS1.1.1673903161.1.0.1673903161.60.0.0; _ga=GA1.2.942427055.1673903161; _tt_enable_cookie=1; _ttp=J8VfV5XnN8jP95bicwfv_HuuZq1; _gid=GA1.2.1101625487.1673903162; _gat_UA-91177118-2=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 201 Created
Server: nginx
Date: Mon, 16 Jan 2023 21:06:02 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 444
Connection: keep-alive
Vary: Accept
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, HEAD, OPTIONS, DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Auth-Token,Accept,Origin,Content-Type,ETag
Access-Control-Expose-Headers: X-Auth-Token,ETag
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 138824c69e12e72ef26b3637992d8eab
8b6bdb1f0e51b05db8099213ff812b17b2c24545
d2500c7df76bb331207793aba8e56ad9b89cecbc59cb52a28d9fbc3ee9a74aa6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158744
Date: Mon, 16 Jan 2023 21:06:02 GMT
Etag: "63c56c5c-1d7"
Expires: Wed, 18 Jan 2023 17:11:46 GMT
Last-Modified: Mon, 16 Jan 2023 15:25:16 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JjVPVOeg3e28doauKLPM1vUwfbxob-eBywkrXa-eJBKrUvLbK9CUJA==
Age: 6391
s.adroll.com/j/pre/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arep.co/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 15 Jan 2020 23:54:18 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: nQEe8wQ7h0ROt7P4GJfDfstto6x684Hy
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 16 Jan 2023 07:24:17 GMT
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
Age: 49365
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: e-pbppflaXgn8BA78qpWcEQhr6MSluRJ7CdKaQ-TFMu2VNks1_u0Nw==
s.adroll.com/j/exp/index.js
200 OK 28 B URL HTTP/1.1 s.adroll.com/j/exp/index.js
IP
File type ASCII text, with no line terminators
Hash 5816cced8568d223aa09d889f300692b
95cab5e474d7391762c3da5c7dc50fcf05df529f
f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
GET /j/exp/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arep.co/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 28
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 00:29:34 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: CiD7z5Qr2ECIL.Zbw84rFXTGVfvZ9kAA
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 16 Jan 2023 15:08:09 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
Age: 21670
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gCsmTXa-egEFeXKnNBOiEDSRQ7aRRkugQ3qQHId81t2y6uDtQq_TWg==
www.facebook.com/tr/?id=1334132337387246&ev=PageView&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162257&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1334132337387246&ev=PageView&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162257&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1334132337387246&ev=PageView&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162257&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 16 Jan 2023 21:06:02 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1334132337387246&ev=Lead&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162263&sw=1280&sh=1024&v=2.9.92&r=stable&ec=1&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1334132337387246&ev=Lead&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162263&sw=1280&sh=1024&v=2.9.92&r=stable&ec=1&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1334132337387246&ev=Lead&dl=https%3A%2F%2Farep.co%2FbyTssz%2Funlock&rl=&if=false&ts=1673903162263&sw=1280&sh=1024&v=2.9.92&r=stable&ec=1&o=30&fbp=fb.1.1673903162256.1590285714&it=1673903161733&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 16 Jan 2023 21:06:02 GMT
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/672735/visit-data?sv=7
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/672735/visit-data?sv=7
IP
POST /api/v2/client/sites/672735/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 148
Origin: https://arep.co
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:06:02 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
cdn.arep.co/1954a23.js
200 OK 0 B IP
GET /1954a23.js HTTP/1.1
Host: cdn.arep.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 08 Nov 2022 03:09:20 GMT
cache-control: max-age=31104000
last-modified: Tue, 08 Nov 2022 02:57:02 GMT
etag: W/"ac05614c5e0dda5915ac7a28cb7c7c60"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6lSQQP4k8nmKkzi6q5oiyzhYpBGXnLcOcaUUbNKBkuje85y4Etl3Eg==
age: 6026201
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PHDLGCL
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PHDLGCL
IP
GET /gtm.js?id=GTM-PHDLGCL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://arep.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 16 Jan 2023 21:06:00 GMT
expires: Mon, 16 Jan 2023 21:06:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 62041
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
52.64.21.46
54.230.245.110
23.36.77.32
93.184.220.29
104.18.21.226
54.171.13.128
31.13.72.36