commontopics.co/automobile/used-car/
301 Moved Permanently 162 B URL HTTP/1.1 commontopics.co/automobile/used-car/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /automobile/used-car/ HTTP/1.1
Host: commontopics.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 24 Oct 2022 08:19:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://commontopics.co/automobile/used-car/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GgY9uZuHYSs4ikqYhOr09l7ldmGMvA953VNK5M6mTpTBIiIkX04rFfEsYJALQEIgsqHmg5SP%2BV4WZNjETTv6prq5FMpVZJWr1W%2BF5buDkHhbPXwBv5oNcuGkbiab2GI0n9Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75f149b50f2a1c06-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 07:52:56 GMT
Expires: Mon, 24 Oct 2022 07:52:56 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d5DlJae810LbT4I2UEA5yYS7o5z9yxX8qsXrAZmf2V4canEuqBR_oA==
Age: 1594
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7862
Expires: Mon, 24 Oct 2022 10:30:32 GMT
Date: Mon, 24 Oct 2022 08:19:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16164
Expires: Mon, 24 Oct 2022 12:48:55 GMT
Date: Mon, 24 Oct 2022 08:19:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: I62CQ9jE6we4P7C2r6ZG7h21jCDunMMEVmDMOQIgUUBtIVDaSTyxbSZ7BPh00BmKFVJ/6l5M+AY=
x-amz-request-id: KA7G9XD0M7XX2KY2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 08:08:26 GMT
age: 665
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 08:19:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 47f8ca0c959dd15c357b98dc9ccf7389
3d01d90bd950af707e7bd7f4270971811a52900a
d5dbe2020d5d68e5986f319ab760c7a3c2f3d4d91f546dba2316746120972780
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D5DBE2020D5D68E5986F319AB760C7A3C2F3D4D91F546DBA2316746120972780"
Last-Modified: Sat, 22 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11704
Expires: Mon, 24 Oct 2022 11:34:35 GMT
Date: Mon, 24 Oct 2022 08:19:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 24 Oct 2022 07:33:32 GMT
Cache-Control: max-age=3600
Expires: Mon, 24 Oct 2022 07:44:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3iNzKe-2XnEN04YXxN9kCaR_Z4nIO4ZXmr-07z7hyVtWvi2Nx_4QQw==
Age: 2759
ocsp.digicert.com/
200 OK 471 B IP
Hash 60d5d7cce6c32a6bdaf0d4c92ec93a1a
cd29edee660366b41749cfd206bdc08fb421449c
fb90c4cc44b32e4ca4a7d1533bbf4a2fd5c482dda5d232f1be2334f3cefbbb0e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4370
Cache-Control: max-age=90002
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:31 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 09:19:33 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 47f8ca0c959dd15c357b98dc9ccf7389
3d01d90bd950af707e7bd7f4270971811a52900a
d5dbe2020d5d68e5986f319ab760c7a3c2f3d4d91f546dba2316746120972780
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D5DBE2020D5D68E5986F319AB760C7A3C2F3D4D91F546DBA2316746120972780"
Last-Modified: Sat, 22 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11704
Expires: Mon, 24 Oct 2022 11:34:35 GMT
Date: Mon, 24 Oct 2022 08:19:31 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 12 kB IP
Hash 4ce661c0097e72a44071515e836f9edb
ef3ccb7ca36f6e4933f44b9bbae400182fe09091
04bf0d8d98ddb6feef2ca478ff1b903da3d8aa47d769e686900bd1b3eaa9bac5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RDwccjx2zeRA0FcspziZiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qVcOW6qKWu99HusGSBppRLgLaPw=
www.googletagmanager.com/gtag/js?id=UA-131252345-36
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-131252345-36
IP
File type ASCII text, with very long lines (1588)
Hash 4166484c5f19f5ce055709f07e5a6c76
f5461f5d99b6881fb50861efec540f6c2e381d96
4f1bccd08279323fa8e7306f23d37b601fa2e56a5cfa250a15cc0622330a845d
GET /gtag/js?id=UA-131252345-36 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 08:19:32 GMT
expires: Mon, 24 Oct 2022 08:19:32 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43571
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.admidainsight.com/tabu/display.js
200 OK 3.8 kB URL HTTP/2 static.admidainsight.com/tabu/display.js
IP
Hash 0d8c81fb31ea3cfa1d41dc981b34a926
5fe33583c918f0e1e12e4499ba8ab81f237b9798
23d9bee72f5b4160cd2d763ba8ed54b457fb277622c1c1e901e754572a02aee2
GET /tabu/display.js HTTP/1.1
Host: static.admidainsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:32 GMT
content-encoding: gzip
content-length: 3492
content-type: application/javascript
last-modified: Mon, 08 Feb 2021 16:36:26 GMT
accept-ranges: bytes
server: nginx
etag: W/"6021688a-20f0"
cache-control: max-age=86400
x-hw: 1666599572.cds023.sk1.hn,1666599572.cds071.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.admidainsight.com/webpush/scripts/v1.2/webpush.js
200 OK 10 kB URL HTTP/2 static.admidainsight.com/webpush/scripts/v1.2/webpush.js
IP
File type ASCII text, with very long lines (23987)
Hash 1e7a2d7544e8c79ee2a35ee89afc2c0d
475cd19d9dfb96c57cfd7a8c038e55c06e7e8667
1a589344dfcf9c50c17418688e3cce499f60646e400e92cf1fea9ad12e58d08e
GET /webpush/scripts/v1.2/webpush.js HTTP/1.1
Host: static.admidainsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:32 GMT
content-encoding: gzip
content-length: 10330
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 08:01:34 GMT
accept-ranges: bytes
server: nginx
etag: W/"6315acde-5df1"
cache-control: max-age=86400
x-hw: 1666599572.cds023.sk1.hn,1666599572.cds213.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 129 kB IP
Size 129 kB (129300 bytes)
Hash 347e8fb99f1e2b991e0f7517352a6ea1
97e35549ad390b206010a0a121f2e7433fdcab19
7d84f55e9ef0ed03ca58b745193ee6d17ce5f63883ecab64bd14488e3b713a14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 854 B IP
Hash 32d19fb7704436d6da8d9d4458c60754
44ed236a5d655e5b9b6614d063de7ee0497c8464
4559b3b7381af3a0509406b646909e3c4469b7150d9479f7708b7e84efaf549e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ffbfbd6d5d1e91af3c02313339eed0d0
df6457b655ac278fe32f3015bba4cff22dae5b2d
1991ca3e854e53f89b92ce93e01e6094f815b1d2c7c31e664481760211ac200a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.9 kB IP
Hash b36b267af83659e5b64d5bf9931be9ad
a67b97c8c31d8fae1dc10cbeedb95502873b60e1
d272a2a956cf150607b1539495b8aa02e9346672f9fb39427b1172d80f583057
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 391524
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 14:07:32 GMT
expires: Thu, 19 Oct 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 411120
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:08 GMT
expires: Thu, 19 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 391524
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:34:21 GMT
expires: Thu, 19 Oct 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 391511
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ffbfbd6d5d1e91af3c02313339eed0d0
df6457b655ac278fe32f3015bba4cff22dae5b2d
1991ca3e854e53f89b92ce93e01e6094f815b1d2c7c31e664481760211ac200a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 08:19:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f19986b4bb8a3720461fd0ee1e2076f2
b823af91de782f7e11ee4b7308c4607394779c0d
b8178dba6d9edab1d4eb40fc9bdfd07a3a4cd0def671aa297e0a7f0010dba723
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8178DBA6D9EDAB1D4EB40FC9BDFD07A3A4CD0DEF671AA297E0A7F0010DBA723"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13144
Expires: Mon, 24 Oct 2022 11:58:36 GMT
Date: Mon, 24 Oct 2022 08:19:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f19986b4bb8a3720461fd0ee1e2076f2
b823af91de782f7e11ee4b7308c4607394779c0d
b8178dba6d9edab1d4eb40fc9bdfd07a3a4cd0def671aa297e0a7f0010dba723
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8178DBA6D9EDAB1D4EB40FC9BDFD07A3A4CD0DEF671AA297E0A7F0010DBA723"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13144
Expires: Mon, 24 Oct 2022 11:58:36 GMT
Date: Mon, 24 Oct 2022 08:19:32 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 24 Oct 2022 06:41:09 GMT
expires: Mon, 24 Oct 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 5903
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
200 OK 34 kB URL HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 5d71ead12f2d52d5cdae09a0dea70908
7ab823bef0d230f22654ad37cbe760a7a8e9e8fb
1c8cb63272ed3989e9e88d8abb3eab4381d1583e4755afbf172f1d5997ea74c8
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:32 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 17 Oct 2022 13:00:02 GMT
etag: W/"634d51d2-16dc3"
content-encoding: gzip
expires: Mon, 24 Oct 2022 08:24:32 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Mon, 24 Oct 2022 08:24:32 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10d7f9d6cab00c28475b8c3724ff07d6
6ccc918e0fefa1acccb12645f8f391a278252adf
9d8bfbbb961cfbce71be280a539fe7c26519819b6641b73c7ac8df57e90c7991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D8BFBBB961CFBCE71BE280A539FE7C26519819B6641B73C7AC8DF57E90C7991"
Last-Modified: Sat, 22 Oct 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9872
Expires: Mon, 24 Oct 2022 11:04:05 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Mon, 24 Oct 2022 10:44:42 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Mon, 24 Oct 2022 10:44:42 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Mon, 24 Oct 2022 10:44:42 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Mon, 24 Oct 2022 10:44:42 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e44a0c5-308b-4a3c-a704-fed082e5c701.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e44a0c5-308b-4a3c-a704-fed082e5c701.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f1a2e95e4cdae92b60d0fde61c6c8312
fa110a433705597d1384e6d5dd0e757090dbe366
bfa8bc3faf60272c250c0b7d220c90bcf9f01267907dd81465ed0a6a4fda8fdc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e44a0c5-308b-4a3c-a704-fed082e5c701.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10639
x-amzn-requestid: 983ddbdb-f97d-44dc-b502-6a555f50217f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDaEkBoAMFcRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b548-351c26ae42c01c94616d04b4;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 05znhcULmL8iPplTvsxxMD0wy4YUADkAs0t2T_AhTUBf1pBKAcc0EA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:46:36 GMT
age: 37977
etag: "fa110a433705597d1384e6d5dd0e757090dbe366"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Mon, 24 Oct 2022 10:44:42 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d6114a-4321-4b7f-bc5c-97a5fd5ac537.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d6114a-4321-4b7f-bc5c-97a5fd5ac537.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a156d6aed9764d3759987c28b80d6f6
864d279c98c2d821010f0846de71f1b20187024f
ee73e1ab7b53ebba35dc2d00958df54a7229096ff8b5e9fd60989e92acb3fbf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d6114a-4321-4b7f-bc5c-97a5fd5ac537.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11635
x-amzn-requestid: aed8aa4d-2cd1-4c5e-999e-ea7391a3ebde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelIoH3BIAMFZ8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b56a-359118d242e827e67150ca6d;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:06 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e8lcPJlpCsILw3INet0e8x3a2ju1syPxKgAscId32EH_J1qvh4wVsg==
via: 1.1 94f8839a97f73584e70cc07d9f704d62.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:16:07 GMT
age: 36206
etag: "864d279c98c2d821010f0846de71f1b20187024f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9b1a13676d3fac304595806959135a2
9c16b23d37594b041cf8678399e6eaeb690346a9
7bc8f67670709caae6b39435fdaa3e5c71b9b30db76c006cc2c841300291a246
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9568
x-amzn-requestid: 0a162a3c-1723-4926-8651-7d22ecade080
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelN4EVKoAMFWnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b58b-10dae6262d730d1f12c50a20;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e6PyqYG1xwBqFI9Xgbwto7aYrv_0Mu4OKyRfuLUFWberMEF00Qo5QA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:46:36 GMT
age: 37977
etag: "9c16b23d37594b041cf8678399e6eaeb690346a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7f5d706-03b5-40c4-9fef-abddcb255f99.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7f5d706-03b5-40c4-9fef-abddcb255f99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1974529bf378941c1b76662e2b283988
cdde9ea46af873e3f838bdb35d69cc0844016311
7c39112dbb1088fe09e010fcd5d85b63a34ac40c7b93e0e9873715ccdf0ac579
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7f5d706-03b5-40c4-9fef-abddcb255f99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10420
x-amzn-requestid: 9fbc5930-f615-4548-a683-061be9a67bb6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDFGPhoAMFVzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b546-0563eb5f6ba62af65182fc3c;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DQSSMaj6KDZSErVdSgL7O7J_LUeBmrsI5lZ3xrI_RcyGH3OYApJVmw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:59:37 GMT
age: 37196
etag: "cdde9ea46af873e3f838bdb35d69cc0844016311"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 772-513, spot sensor temperature 0.000000, unit celsius, color scheme 1, calibration: offset 0.000000, slope 241254190455726276608.000000\012- data
Hash 88436497b6fe5e22155afc45e9e8fe3e
5004575548d76d878a7f27bb3fc4a9a10e8f6909
304c2388dd96c82582d490cd473174b11eac53bf408a29ed78e23d77139ef243
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13962
x-amzn-requestid: 84f8b505-da9d-421c-b00a-3d6407aac332
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDQETqoAMFwxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b547-566c7abb12b09a565be85833;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: N-R8_VOQSIhikiT-qqPi0ABMoZnr234hdcdinyzBath9A8M6aUZ37A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:54:05 GMT
age: 37528
etag: "5004575548d76d878a7f27bb3fc4a9a10e8f6909"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f12f21779aa94b557db8037ceefd15b2
1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86
0d33ee5a721c2f940ff1e7d5fae9abba3781f6d37e458a36285718466ecdcd10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4434
x-amzn-requestid: 41e95a27-2955-4224-8d2c-f12d1254cda7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0EQboAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-5cb99b700c84c99c2d9e52d7;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OTe4NY6F7vvMR1vwdg53oUfynNgHOuyn9VPBf7ub1SqnXTgJRj8dXw==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:05:54 GMT
age: 36819
etag: "1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66a2526416a4e566df4b6699fa44a963
73a78cb7dc4d8bc1962717f2846243756109aaa0
df035e921c09ca67b38e73d39faf7aa62177e7259783e817e7488527a2f0c02b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF035E921C09CA67B38E73D39FAF7AA62177E7259783E817E7488527A2F0C02B"
Last-Modified: Sun, 23 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15089
Expires: Mon, 24 Oct 2022 12:31:02 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0186a171e8b25f61afe56bea155455a0
cce6a59d3fb62994497efbeb74e3252aa8831ab6
a95771a4dc45f819c5e9ac87eaee4be54e4a7fd5e1762b5dc0b0c6855d175e2e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A95771A4DC45F819C5E9AC87EAEE4BE54E4A7FD5E1762B5DC0B0C6855D175E2E"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10419
Expires: Mon, 24 Oct 2022 11:13:12 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 199ff6236fefc076284395633cb6e6ac
9f43f7a09893bd7be1d7877095d507c1470e6123
4de2fdee6cdeb4830766bde99efd17fe1d84ca7e45344026f938f8c0bb9a4e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4DE2FDEE6CDEB4830766BDE99EFD17FE1D84CA7E45344026F938F8C0BB9A4E26"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11718
Expires: Mon, 24 Oct 2022 11:34:51 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=25733
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=25733
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=25733 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://commontopics.co/
Origin: https://commontopics.co
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://commontopics.co
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
d30854308d.b0fea47e81.com/in/track?data=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
200 OK 0 B URL HTTP/2 d30854308d.b0fea47e81.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI1OTIwMDU3ODEyMTg2ODg4MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTMuMCIsInRhZ19pZCI6MjU3MzMsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4zNywiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiVXNlZCUyQ0NhciUyQ0dldCUyQ1RoZSUyQ0Jlc3QlMkNEZWFsJTJDQ29tbW9uJTJDVG9waWNzJTJDVXNlZCUyQ0NhciUyQ0dldHRpbmclMkNpdCUyQ2lzJTJDQmVzdCUyQ2RlY2lzaW9uJTJDTmV2ZXIlMkNnZXQlMkNhJTJDdXNlZCUyQ2NhciUyQ3RoYXQlMkNoYXMlMkNhJTJDdG9uJTJDb2YlMkNiYWQlMkNib2R5JTJDd29yay4lMkNJZiUyQ2l0JTJDaXMlMkNiYWQlMkNvdXRzaWRlJTJDaXQlMkN3aWxsJTJDYmUlMkN3b3JzZSUyQ2luc2lkZSUyMCJ9 HTTP/1.1
Host: d30854308d.b0fea47e81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:33 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d0409fe1f7a5401ce6e5bddd429a8b9
952e4b42c3c1f42cd61f231bb4348a822cb33e70
bc225531352b3cb836b5ddb0b0b65b8cb290a7d3d96fcf2bd138dea495e613d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC225531352B3CB836B5DDB0B0B65B8CB290A7D3D96FCF2BD138DEA495E613D5"
Last-Modified: Sat, 22 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2395
Expires: Mon, 24 Oct 2022 08:59:28 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=25733
200 OK 27 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=25733
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash 26fb0f9e78b0eeace1f1c1622cb895ce
58e12ba70dfe38ffde0888e10e0b004da9a550f0
edb572feeecc65bb3ed151d594305552e6089f90b67224db28b7a7e2277d0078
POST /fp?tag_id=25733 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22285
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 24 Oct 2022 08:19:33 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://commontopics.co
Set-Cookie: id=2640048738313681983; Expires=Tue, 24 Oct 2023 08:19:33 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47de3438616903de538d5df1581b2299
0cc37166fc420363b072c4f9bed0689a09a8bae4
cead8710e2a29750fca8012671cfbd0e6fc4ba61b51dba3f9b5dcb2f3b1c0753
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAD8710E2A29750FCA8012671CFBD0E6FC4BA61B51DBA3F9B5DCB2F3B1C0753"
Last-Modified: Sun, 23 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9606
Expires: Mon, 24 Oct 2022 10:59:39 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bced0fae0a11d81048eb689a5a4cdf34
c5251a2d702bd37e672de1c9f58193d3650cbd02
95356a7bf62f05464ab0152f00617639da8fdfbc727b61519ebad8c4e4c27e30
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "95356A7BF62F05464AB0152F00617639DA8FDFBC727B61519EBAD8C4E4C27E30"
Last-Modified: Sun, 23 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3919
Expires: Mon, 24 Oct 2022 09:24:52 GMT
Date: Mon, 24 Oct 2022 08:19:33 GMT
Connection: keep-alive
768a9301db.cc1503467d.com/health/
200 OK 0 B URL HTTP/2 768a9301db.cc1503467d.com/health/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /health/ HTTP/1.1
Host: 768a9301db.cc1503467d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:33 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
c353ac05ea.b0fea47e81.com/in/multy
204 No Content 0 B URL HTTP/2 c353ac05ea.b0fea47e81.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /in/multy HTTP/1.1
Host: c353ac05ea.b0fea47e81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://commontopics.co/
Origin: https://commontopics.co
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:33 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=0&event_id=899e5d24-a5f9-473c-9c06-1592e644bb61&subid=2037588575&sid=665276690&spot_id=18008&created_at=2022-10-24&timezone=0&ver=7.9.2&is_native=1
200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=0&event_id=899e5d24-a5f9-473c-9c06-1592e644bb61&subid=2037588575&sid=665276690&spot_id=18008&created_at=2022-10-24&timezone=0&ver=7.9.2&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=0&event_id=899e5d24-a5f9-473c-9c06-1592e644bb61&subid=2037588575&sid=665276690&spot_id=18008&created_at=2022-10-24&timezone=0&ver=7.9.2&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:33 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
768a9301db.cc1503467d.com/get/?go=1&data=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
200 OK 1.7 kB URL HTTP/2 768a9301db.cc1503467d.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash 34c3a68fd6ea8a5eaeaf34363d322c91
47df82205c58912327a8b40a4476ff8a592402d5
2a335d8396852d8e0f702e41c384ded78eea61e941f658b08cedbf50845ed969
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5OSwic3BhY2VpZCI6MTQ5OSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IlVzZWQlMkNDYXIlMkNHZXQlMkNUaGUlMkNCZXN0JTJDRGVhbCUyQ0NvbW1vbiUyQ1RvcGljcyUyQ1VzZWQlMkNDYXIlMkNHZXR0aW5nJTJDaXQlMkNpcyUyQ0Jlc3QlMkNkZWNpc2lvbiUyQ05ldmVyJTJDZ2V0JTJDYSUyQ3VzZWQlMkNjYXIlMkN0aGF0JTJDaGFzJTJDYSUyQ3RvbiUyQ29mJTJDYmFkJTJDYm9keSUyQ3dvcmsuJTJDSWYlMkNpdCUyQ2lzJTJDYmFkJTJDb3V0c2lkZSUyQ2l0JTJDd2lsbCUyQ2JlJTJDd29yc2UlMkNpbnNpZGUlMjAiLCJsYWJlbHMiOiI0LDUsNiw3LDgsOSw0Niw0Nyw1NCw1NSw2MSwxMDkiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI3NzE5MTA3MzYiLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjo0Mjk2NywibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6MjY5LCJzdHJhdGFnZW0iOm51bGwsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjB9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiI0Mjk2NyIsImNhdCI6WyJJQUIxIl0sInBhZ2UiOiJodHRwczovL2NvbW1vbnRvcGljcy5jby9hdXRvbW9iaWxlL3VzZWQtY2FyLyJ9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiI5ZTQ5NDdmMzU3NTE0NjU0MTFmZDFhNGY1YzM1OGM3OCIsImZwIjpudWxsfSwiZXh0Ijp7ImR0IjoxNjY2NTk5NTczMjAyfX0= HTTP/1.1
Host: 768a9301db.cc1503467d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:33 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1682625520&pid=0&site=42967&sc=NO&usage_type=DCH&subid=771910736&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-9&site_id=0&spot_id=42967&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42967%26source%3D771910736%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D42967%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42967%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1682625520&pid=0&site=42967&sc=NO&usage_type=DCH&subid=771910736&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-9&site_id=0&spot_id=42967&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42967%26source%3D771910736%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D42967%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42967%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1682625520&pid=0&site=42967&sc=NO&usage_type=DCH&subid=771910736&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-9&site_id=0&spot_id=42967&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1499&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42967%26source%3D771910736%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D42967%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42967%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://768a9301db.cc1503467d.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 24 Oct 2022 08:19:34 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=42967&source=771910736&idzone=0&w=300&h=250&mo=&ve=&site_id=42967&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42967&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d5bf1bb60373c6dfe0a8c2caa04685a
915f63d98fdea38d445c1683171fae58ed8d1a81
e65c1781dbd966ff47e2c6f3b3494e505f3e91e44211476cdde2bd1d9faba9ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E65C1781DBD966FF47E2C6F3B3494E505F3E91E44211476CDDE2BD1D9FABA9EE"
Last-Modified: Mon, 24 Oct 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10203
Expires: Mon, 24 Oct 2022 11:09:37 GMT
Date: Mon, 24 Oct 2022 08:19:34 GMT
Connection: keep-alive
btds.zog.link/in/912/?sid=42967&source=771910736&idzone=0&w=300&h=250&mo=&ve=&site_id=42967&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42967&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=42967&source=771910736&idzone=0&w=300&h=250&mo=&ve=&site_id=42967&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42967&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=42967&source=771910736&idzone=0&w=300&h=250&mo=&ve=&site_id=42967&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42967&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://768a9301db.cc1503467d.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 24 Oct 2022 08:19:34 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://runative-syndicate.com/iframes2/264f9b86ab7e42e89dc44866327f8f86.html?subid=771910736
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Tue, 25 Oct 2022 08:19:34 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 3.0 kB IP
Hash 170ec826eaee1b66f6927f9df86345d9
06fa738341b85491b99befde5219a5770b77e534
452d0e0fdadecf1163bc53fdd8bc3d31afc75311df27171427307ffd1684f7b2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 08:19:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 15:56:23 GMT
Expires: Sat, 29 Oct 2022 15:56:22 GMT
Etag: "d8685be3e4903c7f55bd44796f1e7a2715224e53"
Cache-Control: max-age=458807,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f149cdf92db503-OSL
lcdn.tsyndicate.com/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.jpg
200 OK 15 kB URL HTTP/2 lcdn.tsyndicate.com/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.jpg
IP
Hash 9b15683ec46d215071cb0a208d69d9e3
1624df3d1f140415795980c8554771e9a60590b7
8dc6a947884a136fc2bc2155c415028af369a1e6021db821bdcd6b8f3d6cf5d6
GET /videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://runative-syndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:34 GMT
content-type: image/jpeg
content-length: 14375
last-modified: Tue, 03 Aug 2021 10:36:32 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"61091c30-3810"
age: 15279212
accept-ranges: bytes
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=42967&view=1&tag_ab=a
200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=42967&view=1&tag_ab=a
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=42967&view=1&tag_ab=a HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 24 Oct 2022 08:19:34 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 1840.0=1; expires=Tue, 25 Oct 2022 08:19:34 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 5.3 kB IP
Hash 3fd4cca3b833e5bdad9dc3ecc9dd5aed
116c340cf28708db70a8281edf51c368eb27c97c
6f0aeb3c96e976c9e98075733fd473ab39643997bd4c72469a1e0368cfd0d33d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 08:19:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 15:56:23 GMT
Expires: Sat, 29 Oct 2022 15:56:22 GMT
Etag: "d8685be3e4903c7f55bd44796f1e7a2715224e53"
Cache-Control: max-age=458807,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f149cdeef61c06-OSL
runative-syndicate.com/iframes2/264f9b86ab7e42e89dc44866327f8f86.html?subid=771910736
200 OK 6.5 kB URL HTTP/2 runative-syndicate.com/iframes2/264f9b86ab7e42e89dc44866327f8f86.html?subid=771910736
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4661)
Hash 2d18c976262af19aa9e5d2c37489ea3a
0184aed4c16cb6971ab9ac47aa3758793d65b85f
c93a51e16c8e55f42c0d5cece767bd2dd73c8ee4b268a09d08b41e83f8ee9ec2
GET /iframes2/264f9b86ab7e42e89dc44866327f8f86.html?subid=771910736 HTTP/1.1
Host: runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://768a9301db.cc1503467d.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 08:19:34 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 8ab2df5f46c997e8
set-cookie: ts_uid=583fba74-d54f-4799-90ef-6d59762be1dc; expires=Mon, 24 Apr 2023 08:19:34 GMT; domain=.runative-syndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
c353ac05ea.b0fea47e81.com/in/multy
200 OK 13 kB URL HTTP/2 c353ac05ea.b0fea47e81.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (13174), with no line terminators
Hash 4b6139e8c486cbee26e66270f122c137
a300cee8e833fd10d804ea9d13f07c8a4ccc0bfe
61cce087776b536986b5fbc4e2980cf36d69967ec85460affe4778b906e966a5
Analyzer Verdict Alert quad9 Sinkholed
POST /in/multy HTTP/1.1
Host: c353ac05ea.b0fea47e81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 933
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:34 GMT
content-type: application/json
content-length: 13177
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28c8209a5fc09687955d5ae1a22665ba
5bca40f94c7ac69dab7b440e5a4730ded36e9875
5c9009cd43b5b58ad293a8872bcf7d91ac26b600cf25bcb7a775d18217474960
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C9009CD43B5B58AD293A8872BCF7D91AC26B600CF25BCB7A775D18217474960"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9679
Expires: Mon, 24 Oct 2022 11:00:54 GMT
Date: Mon, 24 Oct 2022 08:19:35 GMT
Connection: keep-alive
c353ac05ea.b0fea47e81.com/in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13874&price=0.000201&is_cpm=0&cpm=0&ecpm=0.008474834906427992&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-10-24&is_native=2&auction_queue=0&burl=ejlg5S-oJTv-jYFlNeRiwURO3MVBk60BTKSI-omG7CaAh1h0HpaEvw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5318008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0033944227020612965&placement_type_id=&skin_test=0&verify_hash=8f163cb403379d4eabf886751fbec540&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000201&user_fp=0&v2_track=0&url=21mI-slZPKGVBLdZaVtbjPIjuiC9ETz-FeULSN2_zAGD9CmRFKtnmFxjw04eRkl6GWMOsIBd-RRKoNwwr8T1RQiIgw1q-6_KcJWJILhsOCg-460VAPKOV-iGmTtg_dNI6PmZO2Jgsvcy4vmloyIduFzZj0aC_Quk6WIEUB-qQ--SMOxd_g&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=25&vertical_id=0&real_bid=0.00017889000000000002&pr=&user_keywords=&auc_type=1&aid=357&ext_cid=0&device_theme=light&keywords=&mlc=1&format=compact2-slide-b_r-body&mlf=1&cpa=12ceb05e-131f-402e-b895-51ee34d89423
302 Found 0 B URL HTTP/2 c353ac05ea.b0fea47e81.com/in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13874&price=0.000201&is_cpm=0&cpm=0&ecpm=0.008474834906427992&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-10-24&is_native=2&auction_queue=0&burl=ejlg5S-oJTv-jYFlNeRiwURO3MVBk60BTKSI-omG7CaAh1h0HpaEvw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5318008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0033944227020612965&placement_type_id=&skin_test=0&verify_hash=8f163cb403379d4eabf886751fbec540&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000201&user_fp=0&v2_track=0&url=21mI-slZPKGVBLdZaVtbjPIjuiC9ETz-FeULSN2_zAGD9CmRFKtnmFxjw04eRkl6GWMOsIBd-RRKoNwwr8T1RQiIgw1q-6_KcJWJILhsOCg-460VAPKOV-iGmTtg_dNI6PmZO2Jgsvcy4vmloyIduFzZj0aC_Quk6WIEUB-qQ--SMOxd_g&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=25&vertical_id=0&real_bid=0.00017889000000000002&pr=&user_keywords=&auc_type=1&aid=357&ext_cid=0&device_theme=light&keywords=&mlc=1&format=compact2-slide-b_r-body&mlf=1&cpa=12ceb05e-131f-402e-b895-51ee34d89423
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13874&price=0.000201&is_cpm=0&cpm=0&ecpm=0.008474834906427992&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2022-10-24&is_native=2&auction_queue=0&burl=ejlg5S-oJTv-jYFlNeRiwURO3MVBk60BTKSI-omG7CaAh1h0HpaEvw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5318008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0033944227020612965&placement_type_id=&skin_test=0&verify_hash=8f163cb403379d4eabf886751fbec540&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000201&user_fp=0&v2_track=0&url=21mI-slZPKGVBLdZaVtbjPIjuiC9ETz-FeULSN2_zAGD9CmRFKtnmFxjw04eRkl6GWMOsIBd-RRKoNwwr8T1RQiIgw1q-6_KcJWJILhsOCg-460VAPKOV-iGmTtg_dNI6PmZO2Jgsvcy4vmloyIduFzZj0aC_Quk6WIEUB-qQ--SMOxd_g&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=25&vertical_id=0&real_bid=0.00017889000000000002&pr=&user_keywords=&auc_type=1&aid=357&ext_cid=0&device_theme=light&keywords=&mlc=1&format=compact2-slide-b_r-body&mlf=1&cpa=12ceb05e-131f-402e-b895-51ee34d89423 HTTP/1.1
Host: c353ac05ea.b0fea47e81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:35 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
X-Firefox-Spdy: h2
c353ac05ea.b0fea47e81.com/in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.2875928717019697&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1666685973&created_at=2022-10-24&is_native=1&auction_queue=0&burl=xXXJa2z-DDiuXo-6nQsGZ7-Md1UdEOt5t5Gfrz8wvgqK0cdVV3_D6g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014473218363506887&placement_type_id=&skin_test=0&verify_hash=ca5762a36cf7ea7fd03b72923f9ffb87&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=BON3uU4IWut1nVSxDn9P82ZHY-usR7bXfusHEGjHudMwrApayCof5WlZpPzuYGXLFNwrIcrNlLLYgPbQ8IJWLuWfNm09AjfC_Bb6Onlbr65gd8IDU57pPhLJNtXGt_nnL3ESclQuYJzLSauMnlD3okaSujNsbNkCMMn6kRWio-lLnJ8jX-GbBrlIbb--bKwqPpfmB_-9KiJG5ei8eoYCsGluwScuDBbfXhA4Fru5QFLUz2Tnibcfz5aiDS969r8GxDlctnA44oPhazWit0UDcZypHJRDGWhL3droYO_-1Yt-9ld2gu_9iF2M9SUUPBQjSKcuW6my6U9kt75SoSY_z4QtooY8iadhZltg0AMuCdhvEM9sIqadlBzxxnXaLPM0r02KR0rHfOsuc_uJVYpP0-gx6HhSk_9EWirVtrG4gSZGIMSqxDTFnCHUFC841lt4fXlqnx3xfEMbvYyYTOBLV6J63L1vKtRCmORdyUonBzryRnbVerE1dR4SIufHnP2D_-Scu80faTxB-C8ZsnWo-dHNlXjG4iXZi1rzUhAm7xv_6YiHnorIEdpprPJRZbesJ-jtfqc_IDuKVDe52DLdbH1g6zp14mRItApAt7FUMatLCM7GDzPPKQFOlRcZFQ_h-nugyB9NGMyZNFrZ8X-HtDgJu0PA9XncAdyA8mvcGg9iXdu3QNQ8U9KE_y_fkl5c9srVh7gPdrtyWuySZziHyvAfLFR-mff8J9alBuQYoIZOM5gSHLl4ktGlMrOC_bYrc6_4PJXEHwUo4mXktU5hoMY4Nms2rH2kaEOP16uP6V7wVR1eUEiKWcljJ2JSFLoEziCa890PbqYvaDk2rpVq3bPBYK7B_Iy4UhJtKrDSOdPFqF8_hutA3kvqXYz9RQpGT_u7-gdTXtrwb1x9PIQKuQSsNtgTFw6naHp-hEjYMMSJEne5MbOprMcOxMsuhK8SGoQA6CteL3vkRYJPmoA7EdTJVUOQk5oRkzqa3sHw7uKlpt4b6HMcj9R45aPCsfbnlLjWjh2boQOoqFcEkeUk_ML6qeBTGxjPO0IqMmAd9H68kViMt6pvjGh_N7G1mc8Vem9Q2VM0c1tre8v5_aYjL-08yW08qbx7j_Dti3C_NzYgb1eMNxpmh6li5v_3r_KVQ_X-4CgqhKyB&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=25&vertical_id=0&real_bid=0.014237500212155283&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=compact2-slide-b_r-body&cpa=3794c56f-4ea9-47c5-af7b-f541d03dc0be
302 Found 0 B URL HTTP/2 c353ac05ea.b0fea47e81.com/in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.2875928717019697&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1666685973&created_at=2022-10-24&is_native=1&auction_queue=0&burl=xXXJa2z-DDiuXo-6nQsGZ7-Md1UdEOt5t5Gfrz8wvgqK0cdVV3_D6g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014473218363506887&placement_type_id=&skin_test=0&verify_hash=ca5762a36cf7ea7fd03b72923f9ffb87&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=BON3uU4IWut1nVSxDn9P82ZHY-usR7bXfusHEGjHudMwrApayCof5WlZpPzuYGXLFNwrIcrNlLLYgPbQ8IJWLuWfNm09AjfC_Bb6Onlbr65gd8IDU57pPhLJNtXGt_nnL3ESclQuYJzLSauMnlD3okaSujNsbNkCMMn6kRWio-lLnJ8jX-GbBrlIbb--bKwqPpfmB_-9KiJG5ei8eoYCsGluwScuDBbfXhA4Fru5QFLUz2Tnibcfz5aiDS969r8GxDlctnA44oPhazWit0UDcZypHJRDGWhL3droYO_-1Yt-9ld2gu_9iF2M9SUUPBQjSKcuW6my6U9kt75SoSY_z4QtooY8iadhZltg0AMuCdhvEM9sIqadlBzxxnXaLPM0r02KR0rHfOsuc_uJVYpP0-gx6HhSk_9EWirVtrG4gSZGIMSqxDTFnCHUFC841lt4fXlqnx3xfEMbvYyYTOBLV6J63L1vKtRCmORdyUonBzryRnbVerE1dR4SIufHnP2D_-Scu80faTxB-C8ZsnWo-dHNlXjG4iXZi1rzUhAm7xv_6YiHnorIEdpprPJRZbesJ-jtfqc_IDuKVDe52DLdbH1g6zp14mRItApAt7FUMatLCM7GDzPPKQFOlRcZFQ_h-nugyB9NGMyZNFrZ8X-HtDgJu0PA9XncAdyA8mvcGg9iXdu3QNQ8U9KE_y_fkl5c9srVh7gPdrtyWuySZziHyvAfLFR-mff8J9alBuQYoIZOM5gSHLl4ktGlMrOC_bYrc6_4PJXEHwUo4mXktU5hoMY4Nms2rH2kaEOP16uP6V7wVR1eUEiKWcljJ2JSFLoEziCa890PbqYvaDk2rpVq3bPBYK7B_Iy4UhJtKrDSOdPFqF8_hutA3kvqXYz9RQpGT_u7-gdTXtrwb1x9PIQKuQSsNtgTFw6naHp-hEjYMMSJEne5MbOprMcOxMsuhK8SGoQA6CteL3vkRYJPmoA7EdTJVUOQk5oRkzqa3sHw7uKlpt4b6HMcj9R45aPCsfbnlLjWjh2boQOoqFcEkeUk_ML6qeBTGxjPO0IqMmAd9H68kViMt6pvjGh_N7G1mc8Vem9Q2VM0c1tre8v5_aYjL-08yW08qbx7j_Dti3C_NzYgb1eMNxpmh6li5v_3r_KVQ_X-4CgqhKyB&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=25&vertical_id=0&real_bid=0.014237500212155283&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=compact2-slide-b_r-body&cpa=3794c56f-4ea9-47c5-af7b-f541d03dc0be
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/show/?mid=407725362&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=665276690&cid=13061&price=0.01675000024959445&is_cpm=0&cpm=0&ecpm=0.2875928717019697&crid=5713643&crtid=1c81c2cc33a9d6c8cd6172aeefa0077e&tcid=0&out_id=0&ver=7.9.2&ver_c=&refdom=commontopics.co&hostname=auc-inpage-hz-6-a&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1666685973&created_at=2022-10-24&is_native=1&auction_queue=0&burl=xXXJa2z-DDiuXo-6nQsGZ7-Md1UdEOt5t5Gfrz8wvgqK0cdVV3_D6g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014473218363506887&placement_type_id=&skin_test=0&verify_hash=ca5762a36cf7ea7fd03b72923f9ffb87&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fcommontopics.co%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01675000024959445&user_fp=0&v2_track=0&url=BON3uU4IWut1nVSxDn9P82ZHY-usR7bXfusHEGjHudMwrApayCof5WlZpPzuYGXLFNwrIcrNlLLYgPbQ8IJWLuWfNm09AjfC_Bb6Onlbr65gd8IDU57pPhLJNtXGt_nnL3ESclQuYJzLSauMnlD3okaSujNsbNkCMMn6kRWio-lLnJ8jX-GbBrlIbb--bKwqPpfmB_-9KiJG5ei8eoYCsGluwScuDBbfXhA4Fru5QFLUz2Tnibcfz5aiDS969r8GxDlctnA44oPhazWit0UDcZypHJRDGWhL3droYO_-1Yt-9ld2gu_9iF2M9SUUPBQjSKcuW6my6U9kt75SoSY_z4QtooY8iadhZltg0AMuCdhvEM9sIqadlBzxxnXaLPM0r02KR0rHfOsuc_uJVYpP0-gx6HhSk_9EWirVtrG4gSZGIMSqxDTFnCHUFC841lt4fXlqnx3xfEMbvYyYTOBLV6J63L1vKtRCmORdyUonBzryRnbVerE1dR4SIufHnP2D_-Scu80faTxB-C8ZsnWo-dHNlXjG4iXZi1rzUhAm7xv_6YiHnorIEdpprPJRZbesJ-jtfqc_IDuKVDe52DLdbH1g6zp14mRItApAt7FUMatLCM7GDzPPKQFOlRcZFQ_h-nugyB9NGMyZNFrZ8X-HtDgJu0PA9XncAdyA8mvcGg9iXdu3QNQ8U9KE_y_fkl5c9srVh7gPdrtyWuySZziHyvAfLFR-mff8J9alBuQYoIZOM5gSHLl4ktGlMrOC_bYrc6_4PJXEHwUo4mXktU5hoMY4Nms2rH2kaEOP16uP6V7wVR1eUEiKWcljJ2JSFLoEziCa890PbqYvaDk2rpVq3bPBYK7B_Iy4UhJtKrDSOdPFqF8_hutA3kvqXYz9RQpGT_u7-gdTXtrwb1x9PIQKuQSsNtgTFw6naHp-hEjYMMSJEne5MbOprMcOxMsuhK8SGoQA6CteL3vkRYJPmoA7EdTJVUOQk5oRkzqa3sHw7uKlpt4b6HMcj9R45aPCsfbnlLjWjh2boQOoqFcEkeUk_ML6qeBTGxjPO0IqMmAd9H68kViMt6pvjGh_N7G1mc8Vem9Q2VM0c1tre8v5_aYjL-08yW08qbx7j_Dti3C_NzYgb1eMNxpmh6li5v_3r_KVQ_X-4CgqhKyB&image_url=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F492x328%2Fq85%2Fimage%2Fvk%2F3643%2F643%2Frect_626aadf074621t1651158512r522.png.webp&skin_id=25&vertical_id=0&real_bid=0.014237500212155283&pr=&user_keywords=&auc_type=1&aid=412&ext_cid=0&device_theme=light&keywords=&format=compact2-slide-b_r-body&cpa=3794c56f-4ea9-47c5-af7b-f541d03dc0be HTTP/1.1
Host: c353ac05ea.b0fea47e81.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:35 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://s.viiqvmfb.com/n/1154/pbiesytebz6fac3dpb4fgzsamjqqy7kzbnsx26cwmres6ufq4brtuyrnp5jgitbsm4ve4xafm56h2vldmcz3uk3j56m3nkfxt2xypk2tbbefciqgzvbdsoay4snkd56q3wulrndahdw4dc5cj4m3favhsfscqbw6knuedaxprjgvg73bpbkffggq6cvwsbzvdbihqvcshbezsdowjzfosulsyrj3t4tbqjl3fskf5b4yuwpyjcbo7csnqzqept4fnlwuqyxfov2k4ye5wsmg5ucio7hvowh4wbunavlnrbegvcsxf6jwbyvf735dxkliqcf6ly3cxb4vlibzji6gcewgjeig24ud6fekyvvckrhocy2tfudrnccl2whjjrvqt2xypk2t7jfuco2wj5f4dspbzvwssg6rfqv2m3pqn5eea2rmba5yusbsujd4cryfki4es2jsk27xjkkscsdfaoernmylmtop5kp7su5chjgogmk6pb5aezy2mrsvvwlkgh3eynojkn46iujz6fvp5oxqjkqvhmvy5u43s2xp3duo2y6sprkvdkcnymym4s2kyfko3qmlujh4cnsx75h6p64ywoxlj5dlrjjph55d3gb2xlohwzuoqus3bimskci3azhawlkcb4ad6eiwgebgexdzse3p52nb7flpqukwtbggq===?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMmDFGDI4cH1uMkWEjRwsaNmLcaJGDjJmVZWbgMDNmRo0aMGCYqSHi4Rwxacgo1LFFxI0bMXLEgHFjhg0RXR6GqTMmYxiZZGrMEDOmhQ0cYXCcrGEmTIswOmW0kPExTJgYYmzIgBFGTE-IZOwsZLvUxkM4dewylJHjhlQ4cBbatHHTJ5yJOmjEsAFDBg3DIsa0SazDZsOUUl1SfCjGjZu9NGg4Vf2wjRuMOmQ0LfnXNewYkmPgeFhHDpu9N2TnuMxbRkY0dOjAmaPjxQs7ZPKYYXNGzZg8eNyYcVHHTZoxb-S4gSMnaJkYMma4AN_mBRsXcNDA-QGnxxgda-bGuFMHTY7_Z3zxxQ1n3GEDF3XkRBIZPVBWRg1iHISUQTnQdBNHMpDBFQ5lIKigDXP0IBlllt3gYWU2iNGDZarZoNqJJAHFIAwuxACjDXAE1YMSbSABxxFqtHADETcYEQQVWtDQwhsGWVGDFlZAAYMWa-jxxBs4jKGHElDUUEUNWTgRhGZttFDEEnXUMNkQSCAhhA025HGFDU4cYYMaRUgxhJJXuEHFEl-0EYUabcTQhhRJ4PGEFnqQcUUMTxgxwxJ4vJGHHUzcYQYVc8zRxh1OvnFGGXCUMUcQWjiRRBY5CBEDFW3g8cUZVSRBhBRVpHGjZvV5VkNKN65RRh53hMfgjWTI0IONCaJIRgw9-ApsswvO0AMMyNIQ7a83IVtDD048gawNPdAxRx2IsZFHDEkNt94bbSB7Qw9ihGEaQl_MkNMXMuCELA4r3gVHG3s99MbABYtABrwZ3fBVGDnoG4OG643REAwzoHQDGe8S_NAYYUC2hWRRiUBeVTrQWJHJYeTRxhtkUJQTaWYsRGNODmU28Bcn2-wCxun995AcdnCm20NljIFwyj_PkIOaK9dRRxoZ1YDDDGbUe4OSWdFgxkk3_McSDGV8bUNWhcklxnlkVPVQGpyJoJQLOdBIgww11kDDXXJ8AXdGc9ftwt15781bGBk18YYeabDBRhgv1PAzCChgwe4OIDCRhht14AECHjjY8IWLmBOtQw42_JwCCEckvcYbL-iX01IxgGBEGnKU_QYeL6D-811joCxCuHeF90XwGRH_EBvCF-HEXQfZ8UXuvzFUw1FXfzWzCHKccVpsVmMW_RdiyLEQDrspXIb0L8ccW-grkyHHG4oZPJQMf82PRx4L0TB02cdJznKa8wKHgSViMJiYGCp2sYzZYGMde8Fd5kC0jMyPDiELTwu6kwY6nCQHLmgbeqAnvIN8QYTGsQjBGAInxvznev4TAR3aYBwWwqkGL9ya3vyCl-mZCg5fCBlFWojDp21NKmKAjPrKUgc2TOQvzLPZx2ADgz4oICA%3D&s=0f206449e6f1a405f1e68f1d4134c631b5d203eadf8715768765085db6e9b7e21666599574&w=t&r=1&d=42&priv=false
200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMmDFGDI4cH1uMkWEjRwsaNmLcaJGDjJmVZWbgMDNmRo0aMGCYqSHi4Rwxacgo1LFFxI0bMXLEgHFjhg0RXR6GqTMmYxiZZGrMEDOmhQ0cYXCcrGEmTIswOmW0kPExTJgYYmzIgBFGTE-IZOwsZLvUxkM4dewylJHjhlQ4cBbatHHTJ5yJOmjEsAFDBg3DIsa0SazDZsOUUl1SfCjGjZu9NGg4Vf2wjRuMOmQ0LfnXNewYkmPgeFhHDpu9N2TnuMxbRkY0dOjAmaPjxQs7ZPKYYXNGzZg8eNyYcVHHTZoxb-S4gSMnaJkYMma4AN_mBRsXcNDA-QGnxxgda-bGuFMHTY7_Z3zxxQ1n3GEDF3XkRBIZPVBWRg1iHISUQTnQdBNHMpDBFQ5lIKigDXP0IBlllt3gYWU2iNGDZarZoNqJJAHFIAwuxACjDXAE1YMSbSABxxFqtHADETcYEQQVWtDQwhsGWVGDFlZAAYMWa-jxxBs4jKGHElDUUEUNWTgRhGZttFDEEnXUMNkQSCAhhA025HGFDU4cYYMaRUgxhJJXuEHFEl-0EYUabcTQhhRJ4PGEFnqQcUUMTxgxwxJ4vJGHHUzcYQYVc8zRxh1OvnFGGXCUMUcQWjiRRBY5CBEDFW3g8cUZVSRBhBRVpHGjZvV5VkNKN65RRh53hMfgjWTI0IONCaJIRgw9-ApsswvO0AMMyNIQ7a83IVtDD048gawNPdAxRx2IsZFHDEkNt94bbSB7Qw9ihGEaQl_MkNMXMuCELA4r3gVHG3s99MbABYtABrwZ3fBVGDnoG4OG643REAwzoHQDGe8S_NAYYUC2hWRRiUBeVTrQWJHJYeTRxhtkUJQTaWYsRGNODmU28Bcn2-wCxun995AcdnCm20NljIFwyj_PkIOaK9dRRxoZ1YDDDGbUe4OSWdFgxkk3_McSDGV8bUNWhcklxnlkVPVQGpyJoJQLOdBIgww11kDDXXJ8AXdGc9ftwt15781bGBk18YYeabDBRhgv1PAzCChgwe4OIDCRhht14AECHjjY8IWLmBOtQw42_JwCCEckvcYbL-iX01IxgGBEGnKU_QYeL6D-811joCxCuHeF90XwGRH_EBvCF-HEXQfZ8UXuvzFUw1FXfzWzCHKccVpsVmMW_RdiyLEQDrspXIb0L8ccW-grkyHHG4oZPJQMf82PRx4L0TB02cdJznKa8wKHgSViMJiYGCp2sYzZYGMde8Fd5kC0jMyPDiELTwu6kwY6nCQHLmgbeqAnvIN8QYTGsQjBGAInxvznev4TAR3aYBwWwqkGL9ya3vyCl-mZCg5fCBlFWojDp21NKmKAjPrKUgc2TOQvzLPZx2ADgz4oICA%3D&s=0f206449e6f1a405f1e68f1d4134c631b5d203eadf8715768765085db6e9b7e21666599574&w=t&r=1&d=42&priv=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMmDFGDI4cH1uMkWEjRwsaNmLcaJGDjJmVZWbgMDNmRo0aMGCYqSHi4Rwxacgo1LFFxI0bMXLEgHFjhg0RXR6GqTMmYxiZZGrMEDOmhQ0cYXCcrGEmTIswOmW0kPExTJgYYmzIgBFGTE-IZOwsZLvUxkM4dewylJHjhlQ4cBbatHHTJ5yJOmjEsAFDBg3DIsa0SazDZsOUUl1SfCjGjZu9NGg4Vf2wjRuMOmQ0LfnXNewYkmPgeFhHDpu9N2TnuMxbRkY0dOjAmaPjxQs7ZPKYYXNGzZg8eNyYcVHHTZoxb-S4gSMnaJkYMma4AN_mBRsXcNDA-QGnxxgda-bGuFMHTY7_Z3zxxQ1n3GEDF3XkRBIZPVBWRg1iHISUQTnQdBNHMpDBFQ5lIKigDXP0IBlllt3gYWU2iNGDZarZoNqJJAHFIAwuxACjDXAE1YMSbSABxxFqtHADETcYEQQVWtDQwhsGWVGDFlZAAYMWa-jxxBs4jKGHElDUUEUNWTgRhGZttFDEEnXUMNkQSCAhhA025HGFDU4cYYMaRUgxhJJXuEHFEl-0EYUabcTQhhRJ4PGEFnqQcUUMTxgxwxJ4vJGHHUzcYQYVc8zRxh1OvnFGGXCUMUcQWjiRRBY5CBEDFW3g8cUZVSRBhBRVpHGjZvV5VkNKN65RRh53hMfgjWTI0IONCaJIRgw9-ApsswvO0AMMyNIQ7a83IVtDD048gawNPdAxRx2IsZFHDEkNt94bbSB7Qw9ihGEaQl_MkNMXMuCELA4r3gVHG3s99MbABYtABrwZ3fBVGDnoG4OG643REAwzoHQDGe8S_NAYYUC2hWRRiUBeVTrQWJHJYeTRxhtkUJQTaWYsRGNODmU28Bcn2-wCxun995AcdnCm20NljIFwyj_PkIOaK9dRRxoZ1YDDDGbUe4OSWdFgxkk3_McSDGV8bUNWhcklxnlkVPVQGpyJoJQLOdBIgww11kDDXXJ8AXdGc9ftwt15781bGBk18YYeabDBRhgv1PAzCChgwe4OIDCRhht14AECHjjY8IWLmBOtQw42_JwCCEckvcYbL-iX01IxgGBEGnKU_QYeL6D-811joCxCuHeF90XwGRH_EBvCF-HEXQfZ8UXuvzFUw1FXfzWzCHKccVpsVmMW_RdiyLEQDrspXIb0L8ccW-grkyHHG4oZPJQMf82PRx4L0TB02cdJznKa8wKHgSViMJiYGCp2sYzZYGMde8Fd5kC0jMyPDiELTwu6kwY6nCQHLmgbeqAnvIN8QYTGsQjBGAInxvznev4TAR3aYBwWwqkGL9ya3vyCl-mZCg5fCBlFWojDp21NKmKAjPrKUgc2TOQvzLPZx2ADgz4oICA%3D&s=0f206449e6f1a405f1e68f1d4134c631b5d203eadf8715768765085db6e9b7e21666599574&w=t&r=1&d=42&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://runative-syndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 08:19:35 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
vcdn.tsyndicate.com/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4
302 Found 0 B URL HTTP/2 vcdn.tsyndicate.com/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4 HTTP/1.1
Host: vcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://runative-syndicate.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 24 Oct 2022 08:19:35 GMT
content-length: 0
location: https://ip255736194.ahcdn.com/key=bgkVKSM1Tlq8j4jl9SYcdg,s=,,end=1666603175/state=Y1ZKW1oq/buffer=212698:2073,5.5/speed=30385/reftag=093898225/ssd1/454/6/259348766/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4
access-control-allow-origin: *
cache-control: private, max-age=300
expires: Mon, 24 Oct 2022 08:24:35 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d30260271a40f43a5b10f43400397606
e89b03f921f8a3a28636e16c2a7a0b44ca0e0726
c3b2f1342ab2b7463252056c420d4022bbfb95ed3cd96377f378c9a6d71637de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3B2F1342AB2B7463252056C420D4022BBFB95ED3CD96377F378C9A6D71637DE"
Last-Modified: Sat, 22 Oct 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4107
Expires: Mon, 24 Oct 2022 09:28:02 GMT
Date: Mon, 24 Oct 2022 08:19:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c354206d8fafc87fa4b613da70a7f878
75ea9d0f234c21e7aca5317077a45cd1594c35f0
9742e4f94e4b22426961a9a1e481c5af2f28f3a40064d51bd7c8b545ada2eee1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9742E4F94E4B22426961A9A1E481C5AF2F28F3A40064D51BD7C8B545ADA2EEE1"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13181
Expires: Mon, 24 Oct 2022 11:59:16 GMT
Date: Mon, 24 Oct 2022 08:19:35 GMT
Connection: keep-alive
s.viiqvmfb.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=?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
302 Found 0 B URL HTTP/2 s.viiqvmfb.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=?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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=?f=https%3A%2F%2Fi.cdnkimg.com%2Fauto%2F192%2Fq85%2Fimage%2Fvk%2F3643%2F643%2F626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: s.viiqvmfb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Mon, 24 Oct 2022 08:19:35 GMT
content-length: 0
location: https://i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:35 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
200 OK 10 kB URL HTTP/2 i.cdnkimg.com/auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 68329d624a42af6145117bed5c9a2f03
4439b8d8b7e2dc706b5e9a417852bf16e6eb17dd
ede7a9f931abc7e53d07dbf4a82e992cfc38ebb280158f7fa4d12d00cab03bc6
GET /auto/492x328/q85/image/vk/3643/643/rect_626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:35 GMT
content-type: image/webp
content-length: 10348
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Mon, 07 Nov 2022 08:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 471 B IP
Hash f6abe7390c5a8c65da6bd4fae946876a
43d45ca58281d15fddbd94133c0ddd877fe309a0
5bbac3c357299ed1e10acd2b84867734cb9ae2a4a2cd1e702f35be16fe6e11e6
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 08:19:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 04:41:58 GMT
Expires: Sun, 30 Oct 2022 04:41:57 GMT
Etag: "43d45ca58281d15fddbd94133c0ddd877fe309a0"
Cache-Control: max-age=602363,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1056
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75f149d1a8f40afa-OSL
i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
200 OK 7.7 kB URL HTTP/2 i.cdnkimg.com/auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 311dea4d14f115d233335c6e836384b4
8b92a31d5f07440ea67469f1b2827fe1bde271e4
8136f9d883af8abb2895a1c5946063fc41ed4b3a7f7226ffe2f49e49a3d0c961
GET /auto/192/q85/image/vk/3643/643/626aadf074621t1651158512r522.png.webp HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:35 GMT
content-type: image/webp
content-length: 7712
server: nginx/1.19.0
cache-control: max-age=1209600
x-cache-status: MISS
expires: Mon, 07 Nov 2022 08:19:35 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
768a9301db.cc1503467d.com/get/?go=1&data=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
302 Found 0 B URL HTTP/2 768a9301db.cc1503467d.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=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 HTTP/1.1
Host: 768a9301db.cc1503467d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 24 Oct 2022 08:19:36 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=1064961515&pid=0&site=42968&sc=NO&usage_type=DCH&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-3&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1064961515&pid=0&site=42968&sc=NO&usage_type=DCH&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-3&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1064961515&pid=0&site=42968&sc=NO&usage_type=DCH&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-3&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1064961515&pid=0&site=42968&sc=NO&usage_type=DCH&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=commontopics.co&hostname=auc-banner-hz-3&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=89&ml=&tag_ab=a&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DUsed%252CCar%252CGet%252CThe%252CBest%252CDeal%252CCommon%252CTopics%252CUsed%252CCar%252CGetting%252Cit%252Cis%252CBest%252Cdecision%252CNever%252Cget%252Ca%252Cused%252Ccar%252Cthat%252Chas%252Ca%252Cton%252Cof%252Cbad%252Cbody%252Cwork.%252CIf%252Cit%252Cis%252Cbad%252Coutside%252Cit%252Cwill%252Cbe%252Cworse%252Cinside%2520%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Fcommontopics.co%252Fautomobile%252Fused-car%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D89%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&stratagem=&ssp=3758 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://commontopics.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 24 Oct 2022 08:19:36 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42968&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42968&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42968&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=Used%2CCar%2CGet%2CThe%2CBest%2CDeal%2CCommon%2CTopics%2CUsed%2CCar%2CGetting%2Cit%2Cis%2CBest%2Cdecision%2CNever%2Cget%2Ca%2Cused%2Ccar%2Cthat%2Chas%2Ca%2Cton%2Cof%2Cbad%2Cbody%2Cwork.%2CIf%2Cit%2Cis%2Cbad%2Coutside%2Cit%2Cwill%2Cbe%2Cworse%2Cinside%20&spot_id=42968&p=https%3A%2F%2Fcommontopics.co%2Fautomobile%2Fused-car%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=89&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://commontopics.co/
Connection: keep-alive
Cookie: 912.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 24 Oct 2022 08:19:36 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Tue, 25 Oct 2022 08:19:36 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f0880afd38d19755aa22d07e9eba25f
64993098da22ee8e40f622432cc6bf3b2f44176c
99a36e7af900404269c373a6e5b72451214b5be1cf8183bb837394c29a4cd1d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "99A36E7AF900404269C373A6E5B72451214B5BE1CF8183BB837394C29A4CD1D9"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17186
Expires: Mon, 24 Oct 2022 13:06:02 GMT
Date: Mon, 24 Oct 2022 08:19:36 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
200 OK 68 B IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://commontopics.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:36 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: e0cea73041c202c45e6ab3a8b14597f5
expires: Mon, 24 Oct 2022 09:19:36 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b24b0e9eeeecd44eafc5957dc5450db
e071eb9837a242f41035da077dc6c9b0178d8f9f
33e9c9c03180d2855606be0605c894180d81e151e2f4b4b2bacf5325c11152d4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9495
x-amzn-requestid: f9246128-d6a3-49e0-982d-9f75d110aa2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelztGlqoAMFs8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b67d-7f04a07955c3c9a8644475a0;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:47:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FDwmWmTCnCZt2aCUx9Tb3r4RJ4co-0A1dAbABurYrJNcyGa6ZMmONw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:13 GMT
age: 37407
etag: "e071eb9837a242f41035da077dc6c9b0178d8f9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
commontopics.co/automobile/used-car/
200 OK 0 B URL HTTP/2 commontopics.co/automobile/used-car/
IP
GET /automobile/used-car/ HTTP/1.1
Host: commontopics.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.32, PleskLin
cache-control: no-cache, no-store, must-revalidate
link: <https://commontopics.co/wp-json/>; rel="https://api.w.org/", <https://commontopics.co/wp-json/wp/v2/posts/706>; rel="alternate"; type="application/json", <https://commontopics.co/?p=706>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jnfViFRfKa1COWL1063peAQ%2B4STpupyrRbfxZTEbOtv7c6M1yIrXbSc5OGCNRehbm0oVPXDgUX6ARdqRS6brrs6WwI0s%2B%2FoizjzaAf%2B%2B2rKgwTmt0sr0icJc7kUFEPDP93E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f149b7edaa0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/static/adManager.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:32 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 13 Jul 2022 06:52:04 GMT
etag: W/"62ce6b94-4e2"
content-encoding: gzip
expires: Mon, 24 Oct 2022 08:24:32 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
na.nawpush.com/tags/25733?version_name=a
200 OK 0 B URL HTTP/2 na.nawpush.com/tags/25733?version_name=a
IP
ASN #39572 DataWeb Global Group B.V.
GET /tags/25733?version_name=a HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://commontopics.co
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:33 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpushsdk.com/npc/sdk/wpu/npush.m.js
200 OK 0 B URL HTTP/2 js.wpushsdk.com/npc/sdk/wpu/npush.m.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/wpu/npush.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:33 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 19 Oct 2022 10:32:41 GMT
etag: W/"634fd249-3d249"
content-encoding: gzip
expires: Mon, 24 Oct 2022 08:24:33 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.natsdk.com/npc/sdk/native.m.js
200 OK 0 B URL HTTP/2 js.natsdk.com/npc/sdk/native.m.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/native.m.js HTTP/1.1
Host: js.natsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:33 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 17 Oct 2022 14:33:56 GMT
etag: W/"634d67d4-b2f5"
content-encoding: gzip
expires: Mon, 24 Oct 2022 08:24:33 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.cabnnr.com/banner-admanager/build.m.js
200 OK 0 B URL HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://commontopics.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 08:19:33 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 18 Oct 2022 08:59:34 GMT
etag: W/"634e6af6-bee8"
content-encoding: gzip
expires: Mon, 24 Oct 2022 08:24:33 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ip255736194.ahcdn.com/key=bgkVKSM1Tlq8j4jl9SYcdg,s=,,end=1666603175/state=Y1ZKW1oq/buffer=212698:2073,5.5/speed=30385/reftag=093898225/ssd1/454/6/259348766/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4
206 Partial Content 0 B URL HTTP/2 ip255736194.ahcdn.com/key=bgkVKSM1Tlq8j4jl9SYcdg,s=,,end=1666603175/state=Y1ZKW1oq/buffer=212698:2073,5.5/speed=30385/reftag=093898225/ssd1/454/6/259348766/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4
IP
ASN #39572 DataWeb Global Group B.V.
GET /key=bgkVKSM1Tlq8j4jl9SYcdg,s=,,end=1666603175/state=Y1ZKW1oq/buffer=212698:2073,5.5/speed=30385/reftag=093898225/ssd1/454/6/259348766/videos/1/f/a0667204a85e1a65c405a2138620e70d4189d9/main.mp4 HTTP/1.1
Host: ip255736194.ahcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://runative-syndicate.com/
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx/1.20.1
date: Mon, 24 Oct 2022 08:19:35 GMT
content-type: video/mp4
content-length: 138254
last-modified: Tue, 03 Aug 2021 15:15:46 GMT
access-control-allow-origin: *
etag: "61095da2-21c0e"
expires: Mon, 24 Oct 2022 10:19:35 GMT
cache-control: max-age=7200, private
content-range: bytes 0-138253/138254
X-Firefox-Spdy: h2
104.21.40.104
45.133.44.24
93.184.220.29
168.119.25.22
23.36.76.226
109.206.163.116
0.0.0.0