www.trackmwsg.digital/?sl=5497933-f304f&data1=Track1&data2=Track2&tag=631c370ba4aead10912d8782&website=888.us.webview-android.&eyeg=1
302 Found 0 B URL HTTP/1.1 www.trackmwsg.digital/?sl=5497933-f304f&data1=Track1&data2=Track2&tag=631c370ba4aead10912d8782&website=888.us.webview-android.&eyeg=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /?sl=5497933-f304f&data1=Track1&data2=Track2&tag=631c370ba4aead10912d8782&website=888.us.webview-android.&eyeg=1 HTTP/1.1
Host: www.trackmwsg.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 10 Sep 2022 07:05:00 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://t.bl-easycdn.com/directclick/?pid=CLBghSztLMxKnP7sw-K3orR0VUY1&wsid=da668e23632bceb92872bc90b01a336e0910-202209-flb
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 06:06:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UG_RvIMnYqZdympa0Fhv_SJ5w-N39IKyHoD6zalSVXXOEIBXJF-SPg==
Age: 3514
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3933
Expires: Sat, 10 Sep 2022 08:10:33 GMT
Date: Sat, 10 Sep 2022 07:05:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
date: Fri, 09 Sep 2022 07:17:12 GMT
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
etag: "742edb4038f38bc533514982f3d2e861"
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IKImDdxAfc7Il9ns9eFDsPgAaEfp7Xz8vIf1_cm4sY6iCN795JeSnw==
age: 85669
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 07:05:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 56ae9629d64bc242aa5664df51a598fe
16be553c72fa342105c7eb1f901ae37453b30d43
ec89c06bf80e3abd3e42ea56ee707ecbae27d75da488ebeb9eb2be0263374715
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EC89C06BF80E3ABD3E42EA56EE707ECBAE27D75DA488EBEB9EB2BE0263374715"
Last-Modified: Thu, 08 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21055
Expires: Sat, 10 Sep 2022 12:55:55 GMT
Date: Sat, 10 Sep 2022 07:05:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 10 Sep 2022 06:56:07 GMT
Cache-Control: max-age=3600
Expires: Sat, 10 Sep 2022 07:53:04 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: huT0TsEpq5ajibG5oSm0HOZWDowU-wnVwYFIxi4hxxMZdACp6Ofomg==
Age: 533
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 56ae9629d64bc242aa5664df51a598fe
16be553c72fa342105c7eb1f901ae37453b30d43
ec89c06bf80e3abd3e42ea56ee707ecbae27d75da488ebeb9eb2be0263374715
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EC89C06BF80E3ABD3E42EA56EE707ECBAE27D75DA488EBEB9EB2BE0263374715"
Last-Modified: Thu, 08 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21054
Expires: Sat, 10 Sep 2022 12:55:55 GMT
Date: Sat, 10 Sep 2022 07:05:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 7ac3cb1924487788f5ee800ac7f5a02b
914a8cd9b7510f003bfaca0cb5cbe843dc4334f1
5352eb31d3d0752e2a4881d3c12cb32d6d485ffb24e107ad42ec303452876215
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1438
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:01 GMT
Last-Modified: Sat, 10 Sep 2022 06:41:03 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash d0c56e0b2955a5dd7f37ba4bbf5727b4
f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b
99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3617
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:01 GMT
Last-Modified: Sat, 10 Sep 2022 06:04:44 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 7ac3cb1924487788f5ee800ac7f5a02b
914a8cd9b7510f003bfaca0cb5cbe843dc4334f1
5352eb31d3d0752e2a4881d3c12cb32d6d485ffb24e107ad42ec303452876215
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1438
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:01 GMT
Last-Modified: Sat, 10 Sep 2022 06:41:03 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 15238321efb3dc80c03e672db9baeca3
1e4a56975726af18da897c6ea5903dca80670000
f6a2f44538adbea268a0c67516ebb15fe9a29b56d56c0553b5fd6430776e5050
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6A2F44538ADBEA268A0C67516EBB15FE9A29B56D56C0553B5FD6430776E5050"
Last-Modified: Thu, 08 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21529
Expires: Sat, 10 Sep 2022 13:03:50 GMT
Date: Sat, 10 Sep 2022 07:05:01 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IhHHNSZt+c1rz1zKoz4Tpw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZnBsCUL1hACAKYfFEyqSShr6M74=
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 15238321efb3dc80c03e672db9baeca3
1e4a56975726af18da897c6ea5903dca80670000
f6a2f44538adbea268a0c67516ebb15fe9a29b56d56c0553b5fd6430776e5050
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6A2F44538ADBEA268A0C67516EBB15FE9A29B56D56C0553B5FD6430776E5050"
Last-Modified: Thu, 08 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21529
Expires: Sat, 10 Sep 2022 13:03:50 GMT
Date: Sat, 10 Sep 2022 07:05:01 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3f85ffb01dc0ff6a14373b13812e8ff0
ff77c50c03241ef7580abea36a4b2862076307dd
4d5ea56120dbcb5995fde57d5bf6f54ec82f575b2518d0377c340e6d62efded1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 14:56:43 GMT
Expires: Thu, 15 Sep 2022 14:56:42 GMT
Etag: "ff77c50c03241ef7580abea36a4b2862076307dd"
Cache-Control: max-age=459700,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7486501ade980b45-OSL
cold.dailynox.com/625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091011_2f_2_28c2_6b2392_18ef_160_631c371d_5b5a2a9a_0_0_0_64_64_0_2_2_0_0&source=28c2::9f6cbb32
302 Found 400 B URL HTTP/1.1 cold.dailynox.com/625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091011_2f_2_28c2_6b2392_18ef_160_631c371d_5b5a2a9a_0_0_0_64_64_0_2_2_0_0&source=28c2::9f6cbb32
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text, with very long lines (398)
Hash ec7b330f00a33fe8f33450cc306ac995
228c887d51dbb0abfcb09d9e5fa6d6d2c17c5f38
c4c0f0ec2dd9cb4916c8d97de9f0117d641eb84df227f2c490c5716da81ca0ae
GET /625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091011_2f_2_28c2_6b2392_18ef_160_631c371d_5b5a2a9a_0_0_0_64_64_0_2_2_0_0&source=28c2::9f6cbb32 HTTP/1.1
Host: cold.dailynox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://99deals.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 10 Sep 2022 07:05:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 400
Connection: keep-alive
Location: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Set-Cookie: redhash=NjMxYzM3MWRiZGE3YWUwMDAxZGIwMmI5fDB8NjI1ZmNhYjVlNzllY2YwMDAxNDMzNGQ0fHwxNDVmNzViMy02ZjJmLTRlODEtYjhlMy1jN2M1ZjUwNTllYjZ8MTY2Mjc5MzUwMQ==; Path=/; Domain=cold.dailynox.com; Expires=Sun, 10 Sep 2023 07:05:01 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8a7c4ad8e847f216474ff1a48cf433a2
1d0eeffdf1643790347b66126a74395b4be87eae
070ec0554f9d640cfc1defc397648fb317be935fde811a5c1da8b4b392b51dcb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 22:18:05 GMT
Expires: Tue, 13 Sep 2022 22:18:04 GMT
Etag: "1d0eeffdf1643790347b66126a74395b4be87eae"
Cache-Control: max-age=313381,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7486501c2fdd0b45-OSL
pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
200 OK 27 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (743)
Hash e824ddbe3f2e507e8677dbad7718d826
6c15a8ea7ce6dffee79ca70ea8e38dd4c63ae899
9bc5da707b370a5dbb0807031f8018645067e184da2f69335dc6fb5f9942f455
GET /no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp= HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://99deals.cyou/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
X-Powered-By: PHP/7.2.34
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1fa8224847ea7d9b4dc8e598fae4142
cb703a2944e58d97dd48a7e56ee9f4510ced78b4
920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pointmultiply.com/no/887328/18/assets/bootstrap/css/bootstrap.min.css
200 OK 161 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Size 161 kB (161364 bytes)
Hash 3b3bcd00c478e36affb10ade5ad7083e
b0a7f2136184bdf441d8f9d6d77a396847e35a57
355391583f29e8e4c3cbba984916f2ec70744cb6ea475b2591549229799121e1
GET /no/887328/18/assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:31 GMT
ETag: "27654-5dbd1530b6eb6"
Accept-Ranges: bytes
Content-Length: 161364
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1fa8224847ea7d9b4dc8e598fae4142
cb703a2944e58d97dd48a7e56ee9f4510ced78b4
920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1fa8224847ea7d9b4dc8e598fae4142
cb703a2944e58d97dd48a7e56ee9f4510ced78b4
920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pointmultiply.com/no/887328/18/assets/css/Features-Boxed.css
200 OK 1.4 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/css/Features-Boxed.css
IP
Hash bca73cd8a0ba61c5b234e25f8d15dc60
a5be1b131e62a9369420bdf9bfa944f1a962a0ab
0adf29bc7f36349628fc07f09349bd0a7ed8ccf3cb10b98e5ec8d96618a47454
GET /no/887328/18/assets/css/Features-Boxed.css HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:01 GMT
ETag: "547-5dbd1513c28fd"
Accept-Ranges: bytes
Content-Length: 1351
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
pointmultiply.com/no/887328/18/assets/css/styles.css
200 OK 1.3 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/css/styles.css
IP
Hash 1b73e06fd57a16be72bdcbe4db928111
8fa7e8ebba058e2e313ead4d60d9f75e082e35da
ad800a02b58f7f60a74021de5cb75c736a7d47d65196583e11d98351a27631d3
GET /no/887328/18/assets/css/styles.css HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:00 GMT
ETag: "541-5dbd1512c3717"
Accept-Ranges: bytes
Content-Length: 1345
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
zring.jukminung.com/rc/22e841bd3c?affclick=22091009_01_371812_c724994091a4e&pubid=a371812s&affe=rdmfl
200 OK 5.8 kB URL HTTP/2 zring.jukminung.com/rc/22e841bd3c?affclick=22091009_01_371812_c724994091a4e&pubid=a371812s&affe=rdmfl
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1551)
Hash d6db89056c927ad60e3c9644802d1d8c
f558f9eea9c67c6b31030e1184f0a36ae772eaa7
d4f7909081a88446996f9c1807de63fa04b216b7c406c66d8b5736b09aa8b323
GET /rc/22e841bd3c?affclick=22091009_01_371812_c724994091a4e&pubid=a371812s&affe=rdmfl HTTP/1.1
Host: zring.jukminung.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 07:05:01 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=OlhM5NgJuN+9g4Np03l0Ljh0FHa2EAw43UEH9xVaAROfaFBDR4S+hUUIqnjbmRqLzg6sxHzMg1XguMH534IWd1p7LbkkUpIr/XPwH5icS3gkc4tvZETIPWB0jw0L; Expires=Sat, 17 Sep 2022 07:05:01 GMT; Path=/
AWSALBCORS=OlhM5NgJuN+9g4Np03l0Ljh0FHa2EAw43UEH9xVaAROfaFBDR4S+hUUIqnjbmRqLzg6sxHzMg1XguMH534IWd1p7LbkkUpIr/XPwH5icS3gkc4tvZETIPWB0jw0L; Expires=Sat, 17 Sep 2022 07:05:01 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BihKRlZLPmHXeNWm1GOaNWym5GCJ1L%2FNDnUsI5nzBkQfuXohEcUfx533orctAUTlILcU2oxZggzv79XIE%2BeK0dMLwIYmszJdYCZfYOMka6gC%2FbFe9CV9O8sjh1GaVnGU53AhKBP0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748650150dc6b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
99deals.cyou/clk/NmdRdEcxOXJqaTJWclFybjlLZWxkd2trS0JpdU9QOFU0QWczMjh5U00rOD0?uc=pube2e7465ae2184e32a0c5fb6c5872724a&tsid=9f6cbb32
200 OK 99 kB URL HTTP/2 99deals.cyou/clk/NmdRdEcxOXJqaTJWclFybjlLZWxkd2trS0JpdU9QOFU0QWczMjh5U00rOD0?uc=pube2e7465ae2184e32a0c5fb6c5872724a&tsid=9f6cbb32
IP
Hash 4c590702cc62ac81e4a030ac30c8ea0f
80c9aae0cd7237b2a8a817fd3b9b7ea168dce4bf
66d7d911491e6f0ff4ddf0bcde980ef65dd8bfb93a8e48f1c5eda6483e54ecea
GET /clk/NmdRdEcxOXJqaTJWclFybjlLZWxkd2trS0JpdU9QOFU0QWczMjh5U00rOD0?uc=pube2e7465ae2184e32a0c5fb6c5872724a&tsid=9f6cbb32 HTTP/1.1
Host: 99deals.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zring.jukminung.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 07:05:01 GMT
content-type: text/html; charset=UTF-8
set-cookie: GEO_b69ab79cadbe96f9da4e7bf8ad761f33438c708b=6b2392; expires=Sat, 10-Sep-2022 08:05:01 GMT; Max-Age=3600
msv-28c2-6b2392-0-a0-2-0=5b5a2a9a; expires=Sun, 11-Sep-2022 07:05:01 GMT; Max-Age=86400
click-2b0-6b2392=20091011_2f_2_28c2_6b2392_18ef_160_631c371d_5b5a2a9a_0_0_0_64_64_0_2_2_0_0; expires=Thu, 09-Mar-2023 07:05:01 GMT; Max-Age=15552000; path=/conversion
charset: UTF-8
content-encoding: UTF-8
p3p: CP="NOI CURa ADMa PSA OUR NOR OTC"
pragma: no-cache
cache-control: no-cache, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex, nofollow, nocache, noarchive
googlebot: noindex, nofollow, nocache, noarchive
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2p1OeTYGH6%2FI6FcxaNnmgXZWkb3JGlE0TFMrzvUhADJuhPyC2NHrQWl%2FA6gi06UIGr60SVuodaRwBqbWe3ey8Pu4rSVPQttRkSCygMLB0XsBp8o0D8y0WvpFpVQ5cgE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74865018da020afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/css/Registration-Form-with-Photo.css
200 OK 1.5 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/css/Registration-Form-with-Photo.css
IP
Hash 41db4b60b519edd1a4204aaef6e0ae82
c45a01c3e3d7f0523f035e8efebaec4e4c3c33b3
ca5b0e60d8aab8ce5ebf327a24bc5d209ac94d0c051614bc5893f3d0b958bf6f
GET /no/887328/18/assets/css/Registration-Form-with-Photo.css HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:01 GMT
ETag: "5e9-5dbd1513f2e67"
Accept-Ranges: bytes
Content-Length: 1513
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.sectigo.com/
200 OK 472 B IP
Hash 73a2c686028c93a8bd7550532d21cb59
1a86ad59ea5201114fe347e5e76a2f0e9cee5290
ce44a44b81dfb5c68f68bc0b856bb593a109ef36f68ff429e225435ea6cc00f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 05:06:13 GMT
Expires: Sat, 17 Sep 2022 05:06:12 GMT
Etag: "1a86ad59ea5201114fe347e5e76a2f0e9cee5290"
Cache-Control: max-age=597069,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7486501e2a250b45-OSL
pointmultiply.com/no/887328/18/assets/js/custom.js
404 Not Found 230 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/js/custom.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0ec48212c910931d5a105c1e97862c7a
54afa207b088ffa1215640625088afabeaf27d04
cc00039abc253ecb6a7dea90bb04779abb583666a36438d73636b5b09cac0665
GET /no/887328/18/assets/js/custom.js HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Content-Length: 230
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-5-stars.png
200 OK 600 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-5-stars.png
IP
File type PNG image data, 136 x 33, 8-bit colormap, non-interlaced\012- data
Hash f94b5ab95081aab8457010108abf1214
255b186650d1663657f19b248885af6f09f69973
5ddf9b69385b4567de37a7dfa7945a10bddf942a7d27f9e4e6282879152167e7
GET /no/887328/18/assets/img/t18-airpods-testi-5-stars.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:18 GMT
ETag: "258-5dbd1524d44b2"
Accept-Ranges: bytes
Content-Length: 600
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1fa8224847ea7d9b4dc8e598fae4142
cb703a2944e58d97dd48a7e56ee9f4510ced78b4
920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pointmultiply.com/no/887328/18/assets/img/t18-airpods-main-img.png
200 OK 22 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-main-img.png
IP
File type PNG image data, 444 x 497, 8-bit colormap, non-interlaced\012- data
Hash 276dc65ce272ea59aceb0e0783023b82
a61fa8ff263b18cf3b944190af9a4cf20da58a37
d7ceb979b0795c1b2ff80ab79d8fa3bf0cdbe3e9504ee480de18027ee73086ac
GET /no/887328/18/assets/img/t18-airpods-main-img.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:16 GMT
ETag: "557f-5dbd1522c8df7"
Accept-Ranges: bytes
Content-Length: 21887
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-1.png
200 OK 8.0 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-1.png
IP
File type PNG image data, 136 x 137, 8-bit colormap, non-interlaced\012- data
Hash 698ca5d31e0067412a476ed920e80000
92fff82450ffcfddcb9ce1f7ff3a944a24a6f66c
e4108d60373a47f7aeea61eac2f45ea0114bcc48ba165bbbd68526bc6f3091c7
GET /no/887328/18/assets/img/t18-airpods-testi-profile-1.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:09 GMT
ETag: "1f1a-5dbd151b7bcaf"
Accept-Ranges: bytes
Content-Length: 7962
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-lock-icn-1.png
200 OK 513 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-lock-icn-1.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash f42480aeef8ff0ec1df097b6f1c64488
18ca86f1bc9365b88efd3a2f3dbac31a4a8a5f99
f1ca89decdc81844738bc0ce5ea3617ec22cf18048295747a2c75c9a31cf34b5
GET /no/887328/18/assets/img/t18-airpods-body-lock-icn-1.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:13 GMT
ETag: "201-5dbd151f409af"
Accept-Ranges: bytes
Content-Length: 513
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-lock-icn-2.png
200 OK 310 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-lock-icn-2.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash 17d0fb6a014e12e0caf324d3e031e6ba
8c227ffd9b5c1dc27058bc001fd3a4baf438ec87
0d511befb8a50e0d1b5a5a24dd7c32e175714d00ac6118396d4e077dd65d9c56
GET /no/887328/18/assets/img/t18-airpods-top-lock-icn-2.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:14 GMT
ETag: "136-5dbd152075ad6"
Accept-Ranges: bytes
Content-Length: 310
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/js/jquery.min.js
200 OK 90 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/js/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 12b69d0ae6c6f0c42942ae6da2896e84
d2cc8d43ce1c854b1172e42b1209502ad563db83
6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f
GET /no/887328/18/assets/js/jquery.min.js HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:09 GMT
ETag: "15d83-5dbd151bf59d7"
Accept-Ranges: bytes
Content-Length: 89475
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-4-stars.png
200 OK 638 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-4-stars.png
IP
File type PNG image data, 135 x 33, 8-bit colormap, non-interlaced\012- data
Hash 4917699c62ac8395be8cfd1356a6ca1e
da464e68f6635280fb11a3bf81ff8a7f44c24e67
0f780e24aeacba722a837421d65b47ce4bb374294d771d250ee892d193042998
GET /no/887328/18/assets/img/t18-airpods-testi-4-stars.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:12 GMT
ETag: "27e-5dbd151f0ecd6"
Accept-Ranges: bytes
Content-Length: 638
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/977792fa/www-player.css
200 OK 49 kB URL HTTP/2 www.youtube.com/s/player/977792fa/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2ff7dffe38ec4ee2b95236282ac9cbf4
b6940a9d6abceaca9a1334599c86e5ecb387ac99
0e38dff0d3a50af651a267c68cb9a4cf577863e67b0afd88a20e11f82335bb11
GET /s/player/977792fa/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49093
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 17:12:20 GMT
expires: Fri, 08 Sep 2023 17:12:20 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 00:15:07 GMT
content-type: text/css
age: 136362
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/977792fa/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/977792fa/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (592)
Hash 7fea2163775a946d24f227926a203ba0
7eee7c5405181ae1d4b4d58f5ffb9adf896bde85
2e327a4c4dd232f389037424af74d8f8109c0c07c6fc3523f2fe16f5c5c0701e
GET /s/player/977792fa/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97906
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 17:12:38 GMT
expires: Fri, 08 Sep 2023 17:12:38 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 00:15:07 GMT
content-type: text/javascript
age: 136344
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-magnify-icn-2.png
200 OK 713 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-magnify-icn-2.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 087fd6309c6f900caa6180129655ab95
28fd8f50ccbc6916b2a57bb1c48a56d75d81ac95
adf170a1899237407afe1929faab73b750cf76d136e73f4533f99423ee81cc74
GET /no/887328/18/assets/img/t18-airpods-body-magnify-icn-2.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:18 GMT
ETag: "2c9-5dbd1524038f6"
Accept-Ranges: bytes
Content-Length: 713
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/977792fa/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/977792fa/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/977792fa/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 17:12:38 GMT
expires: Fri, 08 Sep 2023 17:12:38 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 00:15:07 GMT
content-type: text/javascript
age: 136344
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-3.png
200 OK 6.8 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-3.png
IP
File type PNG image data, 136 x 137, 8-bit colormap, non-interlaced\012- data
Hash 30afea9d91a7ad157e61166bba7f6145
56890347f505e59cd6c6ce9278c019a6ad02f7ed
98cbaaf99cd58ceede06bf0efa33066d184f3d387c95910f13c1fda694366a69
GET /no/887328/18/assets/img/t18-airpods-testi-profile-3.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:08 GMT
ETag: "1aa1-5dbd151a8bcf7"
Accept-Ranges: bytes
Content-Length: 6817
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/977792fa/player_ias.vflset/en_US/base.js
200 OK 588 kB URL HTTP/2 www.youtube.com/s/player/977792fa/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (596)
Size 588 kB (588279 bytes)
Hash 36f47a1bf4bcb0b6e3debf337792a122
745791fd223b5edc725913c8ef9757861ab6fd53
695faa84e0f07e99e4003acb0e13453b5971ea2bf8fb49bad2d43007bda89c76
GET /s/player/977792fa/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 588279
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 17:12:52 GMT
expires: Fri, 08 Sep 2023 17:12:52 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 00:15:07 GMT
content-type: text/javascript
age: 136330
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-message-icn-3.png
200 OK 607 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-message-icn-3.png
IP
File type PNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data
Hash 4bd8007a65e43b87aeba0a1eb80a1e99
5f4c1738866cecbe014f4adf691205b50eebac7c
0ba347c9cf4318c2d72f8281ac8d7bdded92e34093cc79272078853b5e79ec79
GET /no/887328/18/assets/img/t18-airpods-body-message-icn-3.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:20 GMT
ETag: "25f-5dbd1525d4a20"
Accept-Ranges: bytes
Content-Length: 607
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-heart-icn-4.png
200 OK 616 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-body-heart-icn-4.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash d4047c6cac10e707ff2af69840130fa6
0d4774253d02f17451dd53b47907540f957829e3
32522055274e1ea9147704cc700ba38d492f55a0d22fc0ec7c342108facf5c0a
GET /no/887328/18/assets/img/t18-airpods-body-heart-icn-4.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:14 GMT
ETag: "268-5dbd15201a9da"
Accept-Ranges: bytes
Content-Length: 616
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/embed/dEBM7szD9Kg
200 OK 27 kB URL HTTP/2 www.youtube.com/embed/dEBM7szD9Kg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59111)
Hash f4837cdae84a4704924e2b2d314d2bd7
9ac5fd8b0b2ea1d9ca0db91bee2d0e1ff3911454
34db525ecb6593e0e9281f686ae0ce2196ad50bfe57ed459fcdce1d3a4685f39
GET /embed/dEBM7szD9Kg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=MUqOBvuu5V4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=3RUfUjbJvK8; Domain=.youtube.com; Expires=Thu, 09-Mar-2023 07:05:02 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+558; expires=Mon, 09-Sep-2024 07:05:02 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.pointmultiply.com/js/payments.js
200 OK 34 kB URL HTTP/2 payments.pointmultiply.com/js/payments.js
IP
Hash 93da761684122e881cd532efff22ff14
c98e71dd3989f0e420c18aa10b13490a90e92bd0
e7eb531c9e4d236a82600f3a86f5f54d0f3d20c03b2281b4593961dea3188613
GET /js/payments.js HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 10 Sep 2022 07:05:02 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Sep 2022 04:17:20 GMT
vary: Accept-Encoding
etag: W/"6316c9d0-1ef8d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 340441
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Satisfy
200 OK 23 kB URL HTTP/2 fonts.googleapis.com/css?family=Satisfy
IP
Hash 9102e452a6c7ea40497a9243ddc70694
5e75b2fe56b861dc36a3e5b42312e05321b31c79
ad2644df16cce84ebf9d099dd4275a516f07c92b38d879a91dc3fb17788dc3e7
GET /css?family=Satisfy HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Sep 2022 07:05:02 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700
200 OK 57 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700
IP
Hash b3b68b6990b9a7bb1f6741cf75ccd12c
db9b9687486e07830e5f4808266a9d0494bf08de
a3cb0056d4715e3f299780c309509d966d1ec08573f264c92af942faca91e130
GET /css?family=Source+Sans+Pro:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Sep 2022 07:05:02 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-diamond-icn-3.png
200 OK 418 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-diamond-icn-3.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash 8ce1c6cb0caa70e2ae674e7fb833d152
344dd3a3a28d67edf858a30df7dc44f596ccc57f
a9c1b89f57ac1df5479ccd84e9db50b75ba4d0b98c6a053653ef7129b774a71d
GET /no/887328/18/assets/img/t18-airpods-top-diamond-icn-3.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:21 GMT
ETag: "1a2-5dbd1527054f8"
Accept-Ranges: bytes
Content-Length: 418
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/payment-method.png
200 OK 45 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/payment-method.png
IP
File type PNG image data, 984 x 82, 8-bit/color RGBA, non-interlaced\012- data
Hash 145fa1666ad8eed7c972634ea8b74f6e
711dbb19f924a85d275dc23d89fb66046cbdd039
545bf3b9626b5f2d72950cf8cbc3ad3c606e89b07878c255d036eea0a0143233
GET /no/887328/18/assets/img/payment-method.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:12 GMT
ETag: "af01-5dbd151e4c3a8"
Accept-Ranges: bytes
Content-Length: 44801
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-fi-flag.png
200 OK 1.9 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-fi-flag.png
IP
File type PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 8199d970a52dbcc125af18d57ed26f6e
eaaf8c57b51e26f1a89246e9adcd88f626f0f0bb
46abac93d04e5d13aef0a6acbd10396397d86af5d3a4531ee89cca3053c7d42c
GET /no/887328/18/assets/img/t18-airpods-top-fi-flag.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:23 GMT
ETag: "755-5dbd1528e21a0"
Accept-Ranges: bytes
Content-Length: 1877
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14476
Expires: Sat, 10 Sep 2022 11:06:18 GMT
Date: Sat, 10 Sep 2022 07:05:02 GMT
Connection: keep-alive
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 18:59:14 GMT
expires: Tue, 05 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 389148
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 585184
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-delivery-icn-4.png
200 OK 320 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-delivery-icn-4.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash b7d2da0e6aa65d901e61a0c7334209b9
d21deb8fac67e7208123e05f499a87c42637bc7d
18ecb7cba0652b2afb02d367a82303850ed9ad78ee42040002454dfd44cf3b4d
GET /no/887328/18/assets/img/t18-airpods-top-delivery-icn-4.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:17 GMT
ETag: "140-5dbd15237e81f"
Accept-Ranges: bytes
Content-Length: 320
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-payment-logo.png
200 OK 600 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-payment-logo.png
IP
File type PNG image data, 100 x 45, 8-bit colormap, non-interlaced\012- data
Hash 4ad917a0041c9e31dc1dd4bab8914c7e
3fdb56a9264361615552fb6f7c0fd40671ae7380
23c3c585e185ab2cc60bea3a4010dc53ef04db18e62f2157e16f8e58671b2bb3
GET /no/887328/18/assets/img/t18-airpods-top-payment-logo.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:15 GMT
ETag: "258-5dbd15214cc22"
Accept-Ranges: bytes
Content-Length: 600
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:10:21 GMT
expires: Wed, 06 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 309281
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14476
Expires: Sat, 10 Sep 2022 11:06:18 GMT
Date: Sat, 10 Sep 2022 07:05:02 GMT
Connection: keep-alive
pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-cart-icn.png
200 OK 316 B URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-top-cart-icn.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash f8ab20b1d04db37d2c3883f835e28760
f6976805d9c590725b560abe4d10ff3acee4bfae
9191befdd6709eb03c8f3e3ff7e75db942065826434927bac3afafbfbc8439f0
GET /no/887328/18/assets/img/t18-airpods-top-cart-icn.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:23 GMT
ETag: "13c-5dbd15291ee40"
Accept-Ranges: bytes
Content-Length: 316
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6b740bb-cd50-42b6-b38f-dd47e55c168b.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6b740bb-cd50-42b6-b38f-dd47e55c168b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e2ed199f1cb98d32690c0b5c1fa90643
96f3088f1361a8c7a62e36f99b4c58c49a750f95
b2e52fa2d41478c8a23892bed1051bcde3c4a937350b149e65a35ef37cf7c4bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6b740bb-cd50-42b6-b38f-dd47e55c168b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8675
x-amzn-requestid: a28b0b64-d536-4bc2-b659-f8255e9f73b0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XfXe8HEUIAMFiag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309392c-032fdc54025b8fbe21987a57;Sampled=0
x-amzn-remapped-date: Fri, 26 Aug 2022 21:20:44 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 46XxgZo9cRWBMeamxOTEvYgX88KXCeaTRBWnHgiWkqhFXB6iA3tdrA==
via: 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 00:44:05 GMT
age: 22857
etag: "96f3088f1361a8c7a62e36f99b4c58c49a750f95"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-2.png
200 OK 9.6 kB URL HTTP/1.1 pointmultiply.com/no/887328/18/assets/img/t18-airpods-testi-profile-2.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1abac18a85802f38f08561ac64020b55
afbc7666fa0b2093ef0c5d9a955d54d139c09b30
eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
GET /no/887328/18/assets/img/t18-airpods-testi-profile-2.png HTTP/1.1
Host: pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/no/887328/18/?pubid=aff-no&pob=3&m=b3B0aW9uMw%3D%3D&click_id=631c371dbda7ae0001db02b9&subid=RT-60338f6279fcbe00012195b3-28c2::9f6cbb32&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=cea5bd9efbaae940580670c9545d8f55.1662793801&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 07:05:02 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:09:07 GMT
ETag: "15e6-5dbd1519930a0"
Accept-Ranges: bytes
Content-Length: 5606
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 71bafbee3867c04c3712ff98a123d52c
ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf
58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: f2Av7EDI_l1jZfe0kR6K2yQNzxbBXdcXJGycIZbOTp4ZkCuusLk4Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:47 GMT
age: 33255
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
flagcdn.com/no.svg
200 OK 2.8 kB IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 5b67558594676955bdcea53f143875e6
b877a8726a2e6035d86f753215901cf906b4dd94
7408d98954f6892e93667852e978ec710d59b5bac797c1ca9175ae0dec423c6b
GET /no.svg HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 07:05:02 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Nov 2020 12:03:20 GMT
vary: Accept-Encoding
etag: W/"5fb65f08-123"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 2251666
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SDsWA%2F1gf%2FOLUakYBSHBIqwWhdFgxxaMd%2F%2BrCs%2BrqNS5f6xaaC8flcaNQDPb68oR%2BrIeEmgkYnlTnbbkCXznU55lvGuiFFCgSgqILn135o51K1WsVHglCLhV0YIusg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7486501ed8541c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8f11aeba65478b039cfb4100aa23435
88db17a82ea0207ccb4826c2961875c5106b427a
6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8676
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuZEjnIAMFRFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:56:34 GMT
age: 32908
etag: "88db17a82ea0207ccb4826c2961875c5106b427a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:10:21 GMT
expires: Wed, 06 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 309281
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 412441a2a064555c5d7f1400c2741360
7532d9543b93248891324e07e8edff10a36d174d
421b3e9db572f1077abd4ef2748696b38a4117e33db6ae0b5fa46841afa2693f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa03f5a55-72fc-42e1-bf3b-1c427237302d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 14312
x-amzn-requestid: 4d301754-9ed3-401f-9ad5-1862533d7559
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj5wGowIAMF4WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb371-7729383d0bc0f729231ad5b8;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:43:13 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 5L_sCLvWm6TIQnZbgg29I4wkY6HFFrbUkIB9NzrcEamyLP3FV9bBqQ==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:53:49 GMT
age: 33073
etag: "7532d9543b93248891324e07e8edff10a36d174d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3f7c36110c083c75028fc060683f8709
9969a20d8b57e8be8ed278273a4fd8d4c823cfaf
e2cfba3ae7c75e53d222cb1c1ce4609eed802f95406f21077ebcb828ab923405
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 10 Sep 2022 07:05:02 GMT
Last-Modified: Sat, 10 Sep 2022 05:28:02 GMT
Server: ECS (dcb/7EC7)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MSeQ1bsWj2E3gJLpgrw0lE65olpQ3IlKB4_8T03Wn5T9FC5iA81ChA==
Age: 5820
fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
200 OK 28 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
IP
Hash 5a00cfb164c95ba018be4c9205998a24
af4b01933bb68ad39c062b5f3ce1c1ed7b7e1913
63de6a448572bac5a207101f903a5db8ff0e4c874ab091b77e09c28bd0d1e36f
GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Sep 2022 07:05:02 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.covery.ai/resources/covery.js
403 Forbidden 146 B URL HTTP/2 api.covery.ai/resources/covery.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /resources/covery.js HTTP/1.1
Host: api.covery.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 10 Sep 2022 07:05:02 GMT
content-type: text/html
content-length: 146
server: nginx
X-Firefox-Spdy: h2
payments.pointmultiply.com/css/landing_page.css
200 OK 18 kB URL HTTP/2 payments.pointmultiply.com/css/landing_page.css
IP
Hash 370f7a62cab34d9655b14ceb8d638585
751a787b7b0a977698db745bcc3cc1fd43a9c36c
4189263b9a3466adb231827328c6677368dd025f59047377051ca1f76b8c9fa8
GET /css/landing_page.css HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sat, 10 Sep 2022 07:05:02 GMT
content-type: text/css
last-modified: Tue, 06 Sep 2022 04:17:14 GMT
vary: Accept-Encoding
etag: W/"6316c9ca-18248"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
payments.pointmultiply.com/landing-page/campaign-logs
204 No Content 0 B URL HTTP/2 payments.pointmultiply.com/landing-page/campaign-logs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/campaign-logs HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pointmultiply.com/
Origin: https://pointmultiply.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:03 GMT
access-control-allow-origin: https://pointmultiply.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
payments.pointmultiply.com/landing-page/log
204 No Content 0 B URL HTTP/2 payments.pointmultiply.com/landing-page/log
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/log HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pointmultiply.com/
Origin: https://pointmultiply.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:03 GMT
access-control-allow-origin: https://pointmultiply.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
payments.pointmultiply.com/landing-page/campaign-logs
200 OK 491 B URL HTTP/2 payments.pointmultiply.com/landing-page/campaign-logs
IP
Hash c51d65a7ccb1442746e817094e85d1e6
91dd0c60504d9fcffc5c3df818d65b473f293f0b
4c3390e1dc59fa142647d4a0a0904619f97133c90543854c06c1f1d3e6919534
POST /landing-page/campaign-logs HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 958
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:03 GMT
access-control-allow-origin: https://pointmultiply.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6ImlYQUlBZXR2aTdYUDZiNEpENU51elE9PSIsInZhbHVlIjoiQldYcHdBRkxqcjRkaDR4eUFLWGpzK1ZBTmZjbTBCSkxQaXBRbjFOdW5kKzZoRnd3TDZERU1FODRxSE0wR293UyIsIm1hYyI6ImZlN2Y2NjA3YmE3MzJhNDA4YzFjYmYzNTQ3MzhjYjIyNzY4ZWZkNjBiNDY2ODEwODE2MWM3ODdiZWQ1ZjA4NGEifQ%3D%3D; expires=Sat, 17-Sep-2022 07:05:03 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6IkhFMlQ0ZUFFVUVJN1wvQU5FY1dvd0NBPT0iLCJ2YWx1ZSI6Im9UVjh3R0dUV1lzYXVvUTJDUGNcL2tiRjRuWXZQTWIxcUEyeHZmVkRoK1F5RlZuZXFPUkhqNXRzdzNZNHZTMzZTIiwibWFjIjoiNWI3MjYwMTE1OWE3OWUzNmI1N2Q5YjY0MjA2OTU5NTkzZWE3NzAxZjAxMmJlNDUzOTkzYzcxZDZmY2M5NTgyMCJ9; expires=Sat, 17-Sep-2022 07:05:03 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 10 Sep 2022 07:05:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.pointmultiply.com/landing-page/log
200 OK 55 B URL HTTP/2 payments.pointmultiply.com/landing-page/log
IP
Hash 132e0128c904515e5531fe6a48e2c3af
5daa25a46dd86bd68f785e864ed4ad95ceab8dbf
bbcd5284879f50b3dce0c342d6f89101a69b632ecb996953d80d632015db1779
POST /landing-page/log HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 602
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: application/json
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:03 GMT
access-control-allow-origin: https://pointmultiply.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6IncxVFB6QlJFT1oxR2ZPdUdQZ1RuZkE9PSIsInZhbHVlIjoiOEQ1dXVLcElOcUgrZDg0bnJnRTNhXC9KUlM5UmNYZGFWQTQ3Mlh3XC9UMXBYM2Zwdnd5a0VGRzZNajdxWmZHWGZZIiwibWFjIjoiNGE2ZDE3MTQxNTIzMTc0MzNkYjYyNzVkYTAyNzM0ZTNhYjA1MjVjNDEwZTEyOTNlNDRlMjI5ZjMwNTE4YThlZiJ9; expires=Sat, 17-Sep-2022 07:05:03 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6IkpqYUwwSlNpT0xRNkp6VVYzXC9mY0xnPT0iLCJ2YWx1ZSI6IlVRc3prT1wvTVVVYWIwd2U0cVEwRzFBSjFxWThYbFNqYzlIWjZ4VndyYTBGcGJFZ3hFN0czT1ZKNldmdlJVOVwvNiIsIm1hYyI6IjkxNzhkZmNkNTk2YTE2OTEwZDg4NzA4OGM1NzA0ZmIyZjBhMjBmNDc2NmMyNjdhMWI3NTg0MjM0ZGEwNDNlODMifQ%3D%3D; expires=Sat, 17-Sep-2022 07:05:03 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b767f92db6ca34290a001739ab2cf514
405eb88c85f15cb4baef24dfcc153023018afcaf
93cc2014db0eed4b96dda869d22a128c087129b42acc0c13b39792bc7c24df07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 10 Sep 2022 07:05:03 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e66743a6c60c1181d7f47c7f748ddfa3
97e333fac41fce213aeda4a42c79b0c5077e26c0
498cbdcbc5fed75df7e4974b21f3be66580dd169b8c82e76c69a823567e27ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 2baa25abeffbd26bc2f7892289cfa77d
1df349d6eb3e6b207e0aa5fd93973bb193fc6966
40192a6ce019ebec964c23cf70d592e853f858f62aceec7a42b887c590989874
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 10 Sep 2022 07:05:03 GMT
server: ESF
cache-control: private
content-length: 30741
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js
IP
File type ASCII text, with very long lines (35934)
Hash f7485f2e71f406d30ff52095698b34a8
d9d15fda21d492235bcee9d738b7db04aad8e5f4
9f62a0d008d0517f5d0de5c67e03045714ee37312c38988b9c5c679d83a392c3
GET /js/th/PzKwASpP14dcK-4xI3W8wlArk1PaCxVzsebnznhuyzw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14059
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 05:03:35 GMT
expires: Thu, 07 Sep 2023 05:03:35 GMT
cache-control: public, max-age=31536000
age: 266488
last-modified: Mon, 29 Aug 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ffaff9ef1c9c1c3d3913a514f047cc3
5760845d78902a1193a453478552c3540688c4d5
6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aefeb6a39ca428134deb3a3dd1d3519a
52b5f0c5d6c5f1eba1644a0eac7da93241a70faf
8cfb55934061d3e03bb0557f250125274baa8465522491a1aa31296da9db175b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/dEBM7szD9Kg/maxresdefault.webp
200 OK 10 kB URL HTTP/2 i.ytimg.com/vi_webp/dEBM7szD9Kg/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9853810ed835e9d9ea08754f8a41763a
496e4000ea12b7086843404734430332b9504c04
9eeda2680b5791b5113c2b90d4fbd5ef13c99129ce6053477e253b97208c68ca
GET /vi_webp/dEBM7szD9Kg/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 9978
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 07:05:03 GMT
expires: Sat, 10 Sep 2022 09:05:03 GMT
cache-control: public, max-age=7200
etag: "1619164161"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 68696a1ae34e3e3dc77444ca18533d8b
57dca1c1327bf97ef04c055d22ffad00c6a91111
08996bf67df17e28ad3985be2882bc4d27ed9a81d03ec8897ea7e68c1fcfe1eb
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 10 Sep 2022 07:05:03 GMT
server: ESF
cache-control: private
content-length: 30781
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aefeb6a39ca428134deb3a3dd1d3519a
52b5f0c5d6c5f1eba1644a0eac7da93241a70faf
8cfb55934061d3e03bb0557f250125274baa8465522491a1aa31296da9db175b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj
200 OK 643 B URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash e989e0541f159658bfb7bc0d7fde47d5
cdf94075516b6c51084d7103e88e1191ea6712d5
914e1f5b155441ec8660aa7cd17a2b17f05947ad68223247a96ccf301841fca5
GET /ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sun, 11 Sep 2022 07:05:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 10 Sep 2022 07:05:03 GMT
server: fife
content-length: 643
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ffaff9ef1c9c1c3d3913a514f047cc3
5760845d78902a1193a453478552c3540688c4d5
6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 07:05:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
payments.pointmultiply.com/landing-page/campaign-logs
204 No Content 0 B URL HTTP/2 payments.pointmultiply.com/landing-page/campaign-logs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/campaign-logs HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pointmultiply.com/
Origin: https://pointmultiply.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:09 GMT
access-control-allow-origin: https://pointmultiply.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i
IP
GET /css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Sep 2022 07:05:02 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.pointmultiply.com/landing-page/payment-plan?code=EXP-NOR-1&language_keys[]=congratulations&language_keys[]=you_are&language_keys[]=card_number&language_keys[]=mm%2Fyy&language_keys[]=order_now&language_keys[]=billing_information&language_keys[]=address&language_keys[]=city&language_keys[]=state&language_keys[]=postal_code&language_keys[]=phone_number
200 OK 0 B URL HTTP/2 payments.pointmultiply.com/landing-page/payment-plan?code=EXP-NOR-1&language_keys[]=congratulations&language_keys[]=you_are&language_keys[]=card_number&language_keys[]=mm%2Fyy&language_keys[]=order_now&language_keys[]=billing_information&language_keys[]=address&language_keys[]=city&language_keys[]=state&language_keys[]=postal_code&language_keys[]=phone_number
IP
GET /landing-page/payment-plan?code=EXP-NOR-1&language_keys[]=congratulations&language_keys[]=you_are&language_keys[]=card_number&language_keys[]=mm%2Fyy&language_keys[]=order_now&language_keys[]=billing_information&language_keys[]=address&language_keys[]=city&language_keys[]=state&language_keys[]=postal_code&language_keys[]=phone_number HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: application/json
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:02 GMT
access-control-allow-origin: https://pointmultiply.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6InNWVGE3UnZGVzZkV01oYWlwTFwvWjJBPT0iLCJ2YWx1ZSI6Ik1qTDlSNXFoY3NZNzZJY1Q0VXVoeDhpQ3JpRks3eXBpWG1jUXZ1VFlxWEFDZXBWRWFKVXVNd2VBWnJjSVc1OFQiLCJtYWMiOiIyNmQ1YmE2YTc2MTE1ODM0YzViZDhiZTg1Yzg0ZjgzMmUwMDBkNTFlZjI3ZWM5MWNkN2E0MGY5NTFiNmM1M2Q3In0%3D; expires=Sat, 17-Sep-2022 07:05:02 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6IkZQbWRRXC9SZElJV1lmdlV4N1B0M2ZRPT0iLCJ2YWx1ZSI6InF1dUoxdzV6U0JFWHhEeWcwMksrTEVEd05SalA3RmttbDlZMGh5b2J6KzVaSk1BYkhYUk8rV2c4K1BMd2d6NWciLCJtYWMiOiI1N2JhOWFkNGVmZTkyNzYyZGQyYTg0M2Q3YmRmNGIxNzNhMDFmMWM0NGI5MDgyYzY5M2YxZDEzYjY5YjNlYjc5In0%3D; expires=Sat, 17-Sep-2022 07:05:02 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
t.bl-easycdn.com/directclick/?pid=CLBghSztLMxKnP7sw-K3orR0VUY1&wsid=da668e23632bceb92872bc90b01a336e0910-202209-flb
200 OK 0 B URL HTTP/2 t.bl-easycdn.com/directclick/?pid=CLBghSztLMxKnP7sw-K3orR0VUY1&wsid=da668e23632bceb92872bc90b01a336e0910-202209-flb
IP
GET /directclick/?pid=CLBghSztLMxKnP7sw-K3orR0VUY1&wsid=da668e23632bceb92872bc90b01a336e0910-202209-flb HTTP/1.1
Host: t.bl-easycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 10 Sep 2022 07:05:00 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
set-cookie: checkkeks=1; expires=Sun, 10-Sep-2023 07:05:00 GMT; Max-Age=31536000; path=/; domain=.bl-easycdn.com
eTag=cbb2f0112ec33c018b443bfbce33a264; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.bl-easycdn.com
eTag=cbb2f0112ec33c018b443bfbce33a264; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.slimspots.com
ck_uniques=1662879899%3A24589-115227; expires=Sun, 10-Sep-2023 07:05:00 GMT; Max-Age=31536000; path=/; domain=.bl-easycdn.com
ck_uniques=1662879899%3A24589-115227; expires=Sun, 10-Sep-2023 07:05:00 GMT; Max-Age=31536000; path=/; domain=.slimspots.com
ck_uniquesPa=1662879899%3A89322; expires=Sun, 10-Sep-2023 07:05:00 GMT; Max-Age=31536000; path=/; domain=.bl-easycdn.com
ck_uniquesPa=1662879899%3A89322; expires=Sun, 10-Sep-2023 07:05:00 GMT; Max-Age=31536000; path=/; domain=.slimspots.com
ck_sys_uniques_3=1; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.bl-easycdn.com
ck_sys_uniques_3=1; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.slimspots.com
u_current_ads_view=89322----; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.bl-easycdn.com
u_current_ads_view=89322----; expires=Sun, 11-Sep-2022 07:05:00 GMT; Max-Age=86400; path=/; domain=.slimspots.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Z9AN733Czzn19PLvBzZyr1noKhX1PicsvLw%2Bb8RE7Q2PbmBfdpoOe9SVHIxKRDfONbqbYQo3ZOVJDZKy45itddFTK3pgXbS5BEZjsig4leubAWp9sACi8KWvwTxkkOoOw9R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748650119d8c1c02-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.addlnk.com/redirect.css
200 OK 0 B URL HTTP/2 cdn.addlnk.com/redirect.css
IP
GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zring.jukminung.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 07:05:01 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A=
x-amz-request-id: KYXF7EGSHW20KRRM
cf-cache-status: HIT
age: 1924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wBqa1OAyI14G76VPrtIblINCRFPJv3QhD7KDW7XVPH%2FtDK8mi%2Br9N0%2Bzeebh8uu4m8YfBfTBGfTnMh7vfxFv5HJ5evJ9vCQU7EzSnx1175Z3jc7LbCVYp5A65cfXpqlirg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74865016cad70af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
payments.pointmultiply.com/landing-page/campaign-logs
200 OK 0 B URL HTTP/2 payments.pointmultiply.com/landing-page/campaign-logs
IP
POST /landing-page/campaign-logs HTTP/1.1
Host: payments.pointmultiply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 958
Origin: https://pointmultiply.com
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Sat, 10 Sep 2022 07:05:09 GMT
access-control-allow-origin: https://pointmultiply.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6Ild4dmRUOUo3YzlMWEtZcTc0elF1Zmc9PSIsInZhbHVlIjoiWFdhcElEQmtNT3lMSEhyNzRZdG1IMnI0YnJHbVwvcEZrbThjSGoySXdnc2xcLzJqUll6cnVJZStmQ1B5dDd4XC9KcyIsIm1hYyI6IjRiZjEzMmY3YWZkMWY5OTBhOTFkYmE3M2E5ZGI3ZTc2N2Y1OWQ4ZGM2NmU1OGVjYTU4MWEwNWZlOWYxOTJjNDQifQ%3D%3D; expires=Sat, 17-Sep-2022 07:05:09 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6IkFuRnllREtaekZrTjhYaUk1aTZta2c9PSIsInZhbHVlIjoiVXE4c3BXb3h3bEpPVkh4cGp4MjBFNndxclwvNFR1Nlp6RzNYK1hUS3cyN3ZIcm1hQ2YybDExQ0dxOUNVOVdUeVQiLCJtYWMiOiI4YWRkYjVjMWU0ODMzMjU4Njc2Yzk4MGFhYTUyZDIyZTkyMTE2ZDIzOGU2MDU3OTQwOWQzMTk4NWRkZGFjOGZhIn0%3D; expires=Sat, 17-Sep-2022 07:05:09 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i
IP
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pointmultiply.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Sep 2022 07:05:02 GMT
date: Sat, 10 Sep 2022 07:05:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
51.68.82.147
143.204.42.88
104.21.6.234
18.194.3.144
93.184.220.29
23.36.76.226
85.17.54.17
34.241.188.250