r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3006
Expires: Fri, 31 Mar 2023 23:30:37 GMT
Date: Fri, 31 Mar 2023 22:40:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cca063332ba9a89eadd62a8dd7f81a9b
d473b2a7a32c964599ff3bac8f98fa578f03d1d1
02fb74c7c695ad99f7f2fd7c02ae2b88e2da1c5db339f883333d9090291931dc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02FB74C7C695AD99F7F2FD7C02AE2B88E2DA1C5DB339F883333D9090291931DC"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3462
Expires: Fri, 31 Mar 2023 23:38:13 GMT
Date: Fri, 31 Mar 2023 22:40:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ed282214b024a7895d90e229e92bb1cc
1f447aa59287ce2b45860a1a909d005a41305f77
a35ae9f89cbc77ed5fe849acdc2701592799c335f2674776d69c25bca0a00c2e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 31 Mar 2023 22:16:13 GMT
content-type: application/json
age: 1458
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76218c893040d958ae1c4231cdd2133c
6a7b336dee91d4aec26ace0a5883ecdfac52e68f
d35492b04d16ed00e9e195e7c84c99aa6a2b8a93abeb656baae0918986f0a7e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D35492B04D16ED00E9E195E7C84C99AA6A2B8A93ABEB656BAAE0918986F0A7E4"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6225
Expires: Sat, 01 Apr 2023 00:24:16 GMT
Date: Fri, 31 Mar 2023 22:40:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lrWGZ8+T7fF0t1HtLGGe5NcrQZ9pDBqIQWAzJhDRNix4EVLRZFFBROmdXKG/Lb2x/cyTWtFJIXk=
x-amz-request-id: WZV2DK268HN6AVXX
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 31 Mar 2023 22:12:21 GMT
age: 1690
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
t.aagm.link/148260/4632/0
303 See Other 476 B URL HTTP/1.1 t.aagm.link/148260/4632/0
IP
File type HTML document, ASCII text, with very long lines (476), with no line terminators
Hash b876deae3dc2a2a19ecbee1c5720d4f7
002fafcd302de58af23c8ca21a8019b01810c0d6
15663bca2ff9ef88007e3df3e5fb7a7abf314f41dc439355c56d98042da195f4
GET /148260/4632/0 HTTP/1.1
Host: t.aagm.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 303 See Other
Content-Type: text/html; charset=utf-8
Content-Length: 476
Connection: keep-alive
Server: nginx/1.19.0
Date: Fri, 31 Mar 2023 22:40:31 GMT
set-cookie: enc_aff_session_45=ENC03a95b163550bb88a40450940228599115e9638960f6532dc353a91332de89d1cee76ad9b9de3481c91e250bbbf61565df23b7fb208bb9d057c011795ccdd3d17600254f0f5c6061cb612281a8a3ec309c4fb7c2da89cab468b94b745819a76740e629a6a1eb09b2b72c760da1051b02b1e868c6a0d3a353d215387464873116041ebcdb43; Path=/; Expires=Mon, 01 May 2023 02:59:59 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Mon, 23 Feb 2026 09:20:31 GMT; Secure
tracking_id: 102663e98321fef43a80c7d192b864
location: https://t.crdefault.link/148260/11?aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=&aff_click_id=&source=
vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ZB4kRAHCOTfUhrD6DIu3WHL496_F4lAcVLIV81yTmAh0j0GL5LWKMA==
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 22:40:31 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 31 Mar 2023 22:14:39 GMT
age: 1552
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3df8c73360b4239af64e11f9d2388be
dc5463ff26615b40e4eab388052790d6c30ea5e6
877b23d16abf2e0e9f649f53747e82af0b75e8595abd71728254e612847cfdb6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "877B23D16ABF2E0E9F649F53747E82AF0B75E8595ABD71728254E612847CFDB6"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14303
Expires: Sat, 01 Apr 2023 02:38:54 GMT
Date: Fri, 31 Mar 2023 22:40:31 GMT
Connection: keep-alive
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 9901fa6f9f74e5c192e895d92f48798f
2bf947cda17ed7e2cbab65ccf81f3342880c2953
194ae6d5697a377e8356c40589e33f0deabae2552f6efb383d0cd1d9d62fa22b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118160
Date: Fri, 31 Mar 2023 22:40:31 GMT
Etag: "64267b6e-1d7"
Expires: Sun, 02 Apr 2023 07:29:51 GMT
Last-Modified: Fri, 31 Mar 2023 06:19:26 GMT
Server: ECAcc (dcb/7339)
X-Cache: Miss from cloudfront
Via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Jwxd6W0p_IRH0raUNAScpVUEem1c-SXPfctqAqkrvtdUxfEsx3Re5A==
Age: 4225
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CBaRj416EzwR6I/Rh7i+CA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: V+5SzCDQBuFftUHx+pdCiLBCnGE=
t.crdefault.link/148260/11?aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=&aff_click_id=&source=
303 See Other 546 B URL HTTP/2 t.crdefault.link/148260/11?aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=&aff_click_id=&source=
IP
File type HTML document, ASCII text, with very long lines (546), with no line terminators
Hash 9f81e65c0c13cebc4b81a316300bc122
1037426d65251c35d7d78441f3188a4a3942758a
b0f227a34fc14fb89ec7d2b72077f0fce884057790426f73290f68f0db8c9121
GET /148260/11?aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=&aff_click_id=&source= HTTP/1.1
Host: t.crdefault.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 546
location: http://t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
server: nginx/1.19.0
date: Fri, 31 Mar 2023 22:40:32 GMT
set-cookie: enc_aff_session_6562=ENC03c72be199f11a1a69cccb900d6abf670a31290062b323c4baa4d2b6800a942303f225b10eebde04a9d6c219258a526a57a283cf1fd58f49365ad717734c2e9d5950bfe0773b51f3d531c1d8b72ff836821389e2615b721d19b25c7e11fb357d422e9179cd350292279e8f2de79303ac51bfe12018af96fcfe38082e72deac746a2486e927; Path=/; Expires=Sun, 30 Mar 2025 22:40:32 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Mon, 23 Feb 2026 09:20:32 GMT; Secure
tracking_id: 102cb9a82b746cf004a3b425bfd97f
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: WSiCUcSr5Ce4yR5BvycET1i6i4A48qhL11sjjhCEq8cF0dnhUkiphQ==
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 9901fa6f9f74e5c192e895d92f48798f
2bf947cda17ed7e2cbab65ccf81f3342880c2953
194ae6d5697a377e8356c40589e33f0deabae2552f6efb383d0cd1d9d62fa22b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 31 Mar 2023 22:40:32 GMT
Etag: "64267b6e-1d7"
Last-Modified: Fri, 31 Mar 2023 21:54:34 GMT
Server: ECAcc (dcb/7312)
X-Cache: Miss from cloudfront
Via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rSlznGmde6aL-qJVrT7y0WLGRJM7R-rcq_mNwlINNEzDEp4W6lPAPQ==
Age: 2758
t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
308 Permanent Redirect 172 B URL HTTP/1.1 t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 73b402bb0a83e1ae6d3d3f2e56f5def7
662e76efd2050d35e9017bd866a62c5376ae1314
821325821336c77800288f5c342c41d56f572da10c526fee2e601489ff933aae
GET /jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5= HTTP/1.1
Host: t.bbwafx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.17.10
Date: Fri, 31 Mar 2023 22:40:32 GMT
Content-Type: text/html
Content-Length: 172
Connection: keep-alive
Location: https://t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 860736360d4ac259168f652edb48d6ea
d5aebfccc8ea1283069a620d0e6e4e4ab748205d
3029a217f67eb6d829cd72cabebd8874d538b2c3c3e52732411a3eb4f4f7130c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3029A217F67EB6D829CD72CABEBD8874D538B2C3C3E52732411A3EB4F4F7130C"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17878
Expires: Sat, 01 Apr 2023 03:38:30 GMT
Date: Fri, 31 Mar 2023 22:40:32 GMT
Connection: keep-alive
t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
303 See Other 412 B URL HTTP/2 t.bbwafx.com/jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5=
IP
File type HTML document, ASCII text, with very long lines (412), with no line terminators
Hash 6aecf876d751db4bbc0bf9abeab4df24
092ddddefc8a8af7f78b3d44d13d401d3a49a9eb
5faf46231ff0e73cb6bc184dcf3378010d0d34734ba851e202e1bd4fb98f8fd1
GET /jv507p758h?campaign_id=4731&aff_id=148260&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_click_id=&source=&aff_unique1=&aff_unique2=&aff_unique3=&aff_unique4=&aff_unique5= HTTP/1.1
Host: t.bbwafx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
server: nginx/1.17.10
date: Fri, 31 Mar 2023 22:40:33 GMT
content-type: text/html; charset=utf-8
content-length: 412
location: https://tm-offers.gamingadult.com/?offer=123&uid=ce7c6cfd-c3f0-4336-83d0-1a4ce275b06d&subid=10255318fcfbf1b3d74cba636b6bfb&utm_source=148260&lp=352&utm_term=25736
set-cookie: aff_ran_url_6562=23445; Path=/; Expires=Sat, 01 Apr 2023 22:40:33 GMT; Secure
enc_aff_session_6562=ENC039e64e62cabfd5018e3cb9bc712e54d9c207c555eeb1a50daadfda78255afac8088d11386c84bbe2a9b9ca83df11830be23635dfa04caa28e1bbe99d6c0c1b02cd38ab46f23d0005783c37197fc3f42a295e9fb827207c5dc4cf01fcfa9cf08118a3a1da54a2153f16f77397888a1e04bc6e9d19f2bbf6ff7ef1d3320563006201b8a6cc8; Path=/; Expires=Sun, 30 Mar 2025 22:40:33 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Mon, 23 Feb 2026 09:20:33 GMT; Secure
tracking_id: 10255318fcfbf1b3d74cba636b6bfb
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14496
Expires: Sat, 01 Apr 2023 02:42:09 GMT
Date: Fri, 31 Mar 2023 22:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14496
Expires: Sat, 01 Apr 2023 02:42:09 GMT
Date: Fri, 31 Mar 2023 22:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14496
Expires: Sat, 01 Apr 2023 02:42:09 GMT
Date: Fri, 31 Mar 2023 22:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14496
Expires: Sat, 01 Apr 2023 02:42:09 GMT
Date: Fri, 31 Mar 2023 22:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14496
Expires: Sat, 01 Apr 2023 02:42:09 GMT
Date: Fri, 31 Mar 2023 22:40:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ff5ce6b-6aa5-4dee-8d16-aa3f8b265b59.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ff5ce6b-6aa5-4dee-8d16-aa3f8b265b59.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95b4bec205ae2333b5364e6c6bcc0bbf
931e351c6f6938fae4988f25297f010acd48a6ae
dc0a45c6e520ced7b4f0d936c58289be840d22ed09db6f4814456cdf1448e934
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ff5ce6b-6aa5-4dee-8d16-aa3f8b265b59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6416
x-amzn-requestid: 67096d91-717f-4063-8eb0-27861e962b2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CiCLOFgZoAMF3xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6423e3e1-47604c2a497b529e72d91a85;Sampled=0
x-amzn-remapped-date: Wed, 29 Mar 2023 07:08:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: LEsZTvaedZGhAea0MVs1L1MOrwxuJ6k0adgL_2UHKOyEwxrUaJznSg==
via: 1.1 0a166b53605851fe961f5a2952e5a748.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 10:42:58 GMT
age: 43055
etag: "931e351c6f6938fae4988f25297f010acd48a6ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a88f6c7b5bce83cc00e9e8271cf56702
21835a62ac378c55a61a762636b811a837749648
40b4e80bf0a5ac477804025c56beb2263d77a9f84933eabf6d464589e6f1d573
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5257
x-amzn-requestid: 694e361b-d59f-4a35-b547-de5a42689670
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ClU6mHJuIAMF5Iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64253510-4f0d883b2f15ceee32b013da;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: -nOAcLEHo6i5uOJHpDTP9r7bI0F9okpHJ77bPkOEvUpPKmRWebrwZw==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 07:30:05 GMT
age: 54628
etag: "21835a62ac378c55a61a762636b811a837749648"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63f65b3207378879c6e794007b8a11ee
f0ee85f6acc45822ca5dc638bedefb21618d9127
dadd45018a3f500653176e5d585284fa28ca8140ec71c666feb4ab1b93f54c54
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8479
x-amzn-requestid: 918a80ec-9fed-420b-b213-3c7e34e007ed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm9WEw_IAMF53g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751ee-7cdad9533b2617c0043823f2;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 5k1BvSMuAPqwe3p5nriPjlGSoNbEV8HCa7pwF2_Bx0C6s5hNB0Ea4Q==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:58:10 GMT
etag: "f0ee85f6acc45822ca5dc638bedefb21618d9127"
content-type: image/jpeg
age: 2543
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 800c2662fd6ab8829a02b7d63084c38d
0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5950
x-amzn-requestid: 5d5a94f5-db2f-4c4c-9c9f-08c14b0ccd80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm7NG2NIAMF-sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751e1-57c957f442c42fe148e66831;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:25 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: k7ZzBBGmbX5OCG_u8RwOqyLQBvohNe643wpsd3Srg2hoxh55aqSV6A==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:38:48 GMT
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
content-type: image/jpeg
age: 3705
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc960713a-d448-4b65-8d89-5da5a2031c7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc960713a-d448-4b65-8d89-5da5a2031c7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7abfd37bfd9b14a195c3de2d399b6d8a
65c966c2dd0015ffa61acea36212a538eccd5fd9
c80e0dc705226d0b96fbb2fc7dde331ba5ebca2e887d6b77661d7c6a6efdd49d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc960713a-d448-4b65-8d89-5da5a2031c7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14764
x-amzn-requestid: 76fa5c4f-2fa7-4310-9ad8-80cd096fb636
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CqnIXF_aoAMFtGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64275235-2846a8ee4376c7c02a919ed9;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:35:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: amQTkLCNC_uZPfK4WtkXyNuYaMI6-5epIiCmGNB6Day7oExaNKO9Hw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:49:55 GMT
age: 3038
etag: "65c966c2dd0015ffa61acea36212a538eccd5fd9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfa5d643-243c-4157-97e2-d929d9b82514.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfa5d643-243c-4157-97e2-d929d9b82514.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 613b90b49678a72443e992713b7eb711
f4216e9b06d9cb62aadfafce434789a3cc5d1fe2
7cb101a12e824bf26552b2aaeb00df0e3f239c254168b9dee65192b484f1b61e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfa5d643-243c-4157-97e2-d929d9b82514.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4697
x-amzn-requestid: 800eecdb-6883-4266-a476-7e3ce7985d3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ClVE3HmcoAMF9cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64253552-6ee0d63805e7a9631efa30fd;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 07:08:02 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: coKmHNJLD7miKkRqU3JiHYurjgK5WSnLuwTfw9uNohVOXv-7XjVatg==
via: 1.1 304b956e2039e07753fa39109152d594.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 07:43:53 GMT
age: 53800
etag: "f4216e9b06d9cb62aadfafce434789a3cc5d1fe2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash fa65ba9aa857fd830bbfa887a0b19bd0
e3ab4a03c60b5365304304f9b3abac3922e2b5bc
a8d7522fe8c58c35d38da48b1b12716be7e05eef63a6598aaf0db591dbe3cb6e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 22:40:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 08:28:38 GMT
Expires: Fri, 07 Apr 2023 08:28:37 GMT
Etag: "e3ab4a03c60b5365304304f9b3abac3922e2b5bc"
Cache-Control: max-age=553083,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0c1840df1eb505-OSL
www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
200 OK 1.5 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fdd5a974dd658ab47dc41a06bffbfcb5
a1e57385cbcdfd21fae4e9de0af546a20c9e9dec
4dc8f896ca8d3ab8cc14a57d5382611dbb82c87ac18fa2c2669ad9462edc5b12
GET /affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8= HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:09 GMT
etag: "1187-56f887e509940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1539
content-type: text/html; charset=utf-8
set-cookie: HAPBK=web10|ZCdhZ; path=/; Secure; SameSite=None
cache-control: private
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ac29d7d71ef6c0cc7547974c8c4f7b
29108a8370757ef63f347d1fd2ae696f5842342c
3371093d6dab54c7c3b612e3774435f0a592bee4e40fbcc2edd55d29d7715c26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 22:40:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hentaiheroes.com/affiliate/LP6/assets/1-Manga.png
200 OK 62 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/1-Manga.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 273 x 265, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d02cdef34f7f68bc108a295c99be1c5
95c5d41e3c6cc08056154dda742c213d7ed43e75
741b09896921aa74c50433fd93b3b9930216eccd35a5b3cce708fd292469441e
GET /affiliate/LP6/assets/1-Manga.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:09 GMT
etag: "f3b3-56f887e509940"
accept-ranges: bytes
content-length: 62387
content-type: image/png
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/2-Villains.png
200 OK 64 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/2-Villains.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 273 x 265, 8-bit/color RGBA, non-interlaced\012- data
Hash e1d69b56d472c3efb0234477f34f35e7
c56f6d4be01ed35e37730a14300e05421bfb6e4a
2bdb9d1592ed4d9711a73b62e7303c3f338f42022a13a97351de51f6e5d0ca05
GET /affiliate/LP6/assets/2-Villains.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:09 GMT
etag: "fa46-56f887e509940"
accept-ranges: bytes
content-length: 64070
content-type: image/png
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/js/less.min.js
200 OK 46 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/js/less.min.js
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (32026)
Hash 3d3285e66e6ff0e07118520cd6892196
b80c67aed0813eef8f42e53d8d6921417609311d
d359246ec05536d895d83921b39268c7d7811ee15d315c1e2c600759a512e9fc
GET /affiliate/LP6/js/less.min.js HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:17 GMT
etag: "25cc3-56f887ecaab40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 46424
content-type: application/javascript
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/js/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/js/jquery-3.3.1.min.js
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (65451)
Hash fb0e6981c97fba54d76f9b2bca152299
7c26673f6d5dd46220ca13f2197a5f5e70d06335
09b221854d59bd9fb7dcd7042f9fcee8b6b8f958d932096a9ca307e2d63813d0
GET /affiliate/LP6/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:17 GMT
etag: "1538f-56f887ecaab40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 30307
content-type: application/javascript
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/js/getParam.js
200 OK 389 B URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/js/getParam.js
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (407)
Hash 942c5a8f0b1ea9e3784e2a0a84660a7d
c342934cd8bf8a972c4c7785ef995b88b93827fa
9adf7aff191bd61cd34ed799834cb1f8a98217394569817254e7c83b8d503294
GET /affiliate/LP6/js/getParam.js HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Thu, 13 Aug 2020 09:39:06 GMT
etag: "397-5acbf134b8280-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 389
content-type: application/javascript
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/4-PVP.png
200 OK 69 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/4-PVP.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 273 x 265, 8-bit/color RGBA, non-interlaced\012- data
Hash fd1b4843c336082cc60cab46611bdb8a
72d32b02dd8b3874da52b70b924e81b68dba752c
fd105112eadeffc73739ba7b30b05cbd85b9aabadabf4726bb01841ec3ac9e23
GET /affiliate/LP6/assets/4-PVP.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:10 GMT
etag: "10db5-56f887e5fdb80"
accept-ranges: bytes
content-length: 69045
content-type: image/png
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ac29d7d71ef6c0cc7547974c8c4f7b
29108a8370757ef63f347d1fd2ae696f5842342c
3371093d6dab54c7c3b612e3774435f0a592bee4e40fbcc2edd55d29d7715c26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 22:40:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hentaiheroes.com/affiliate/LP6/style.less
200 OK 9.1 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/style.less
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with CRLF line terminators
Hash a77733479ae473d30062cb12b145854f
7926d46e350e1d02166798a9a87e0a47e3954afe
56833dbb8f41a5c25e1c62dd361a35f9c1e51399626dd0c7b5fcc7d3919c9d5b
GET /affiliate/LP6/style.less HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:09 GMT
etag: "23a5-56f887e509940"
accept-ranges: bytes
content-length: 9125
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/favicon.png
200 OK 1.1 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/favicon.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash bd91394888f542514d8ae748cf73e842
c0d583dc935b015a795dd4e1d13a9aa7327c2ef9
778dd20f2e9a2cb7a1fc8f5f60dafd972ffc01715598def042070dfbf55a8cc0
GET /affiliate/LP6/assets/favicon.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:12 GMT
etag: "47b-56f887e7e6000"
accept-ranges: bytes
content-length: 1147
content-type: image/png
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/bg.jpg
200 OK 228 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/bg.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JPEG image data, baseline, precision 8, 1920x1080, components 3\012- data
Size 228 kB (228525 bytes)
Hash 76a18f73c56f43fd226371921a13898c
59e58dd9f7136b2dd37d658987c91d5e8f46d44a
1652adbd73ad13ee02894fccc1ad06aee2548804fdb1e16e68dd188039a7a023
GET /affiliate/LP6/assets/bg.jpg HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Wed, 27 Jun 2018 09:29:02 GMT
etag: "37cad-56f9c3ec17380"
accept-ranges: bytes
content-length: 228525
content-type: image/jpeg
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/desk_footer.png
200 OK 154 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/desk_footer.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1920 x 381, 8-bit/color RGBA, non-interlaced\012- data
Size 154 kB (153521 bytes)
Hash 79b59a719a51bf636c0ee0b1e0174af1
8a8ab45e22ce354668dd52351aa62cb6e4105e76
ab8fdfc9329c6800d54ea319fbc181a5e7776e2518f59f735feb6b2641622623
GET /affiliate/LP6/assets/desk_footer.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:12 GMT
etag: "257b1-56f887e7e6000"
accept-ranges: bytes
content-length: 153521
content-type: image/png
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/SupersonicRocketship.ttf
200 OK 23 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/SupersonicRocketship.ttf
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type TrueType Font data, 15 tables, 1st "OS/2", 46 names, Macintosh, Imagex. 2017. All Rights ReservedRegularSupersonic Rocketship:Version 1.00Version 1.00 April 9, \012- data
Hash afe641e08cd3b77a00b2472246842965
06708e3b5c8956187e9ffbe53667ded14887c2c1
466fa516390a124f770bf1a587457e7b15cd505cdde6fe18e0ac9dc12812effe
GET /affiliate/LP6/assets/SupersonicRocketship.ttf HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:15 GMT
etag: "5a8c-56f887eac26c0"
accept-ranges: bytes
content-length: 23180
access-control-allow-origin: *
content-type: font/ttf
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/CarterOne.ttf
200 OK 66 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/CarterOne.ttf
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type TrueType Font data, 18 tables, 1st "FFTM", 24 names, Macintosh, Copyright (c) 2011 by vernon adams. All rights reserved.Carter OneRegularvernonadams: Carter One\012- data
Hash 7cf5ed9f19d7388fc71661b08a0f0e38
e6ba324a746248ece49abe6a47655c5364023e38
9267b32e571924b5977a3bfb068726603a1eecf2af8dadbc4262e943b53959c8
GET /affiliate/LP6/assets/CarterOne.ttf HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:10 GMT
etag: "103e4-56f887e5fdb80"
accept-ranges: bytes
content-length: 66532
access-control-allow-origin: *
content-type: font/ttf
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/desk_girls.png
200 OK 461 kB URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/desk_girls.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1802 x 982, 8-bit colormap, non-interlaced\012- data
Size 461 kB (460861 bytes)
Hash c655e80cd8975b0d6d4fc4e574f390dc
52632ff3eccf81a33ab54ea473e48f93e56d1889
88be8eb9ffad20e4fa0a475ffa77737b8352cb289ef980ee7a8c6dd0c8355f87
GET /affiliate/LP6/assets/desk_girls.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Wed, 27 Jun 2018 09:29:02 GMT
etag: "7083d-56f9c3ec17380"
accept-ranges: bytes
content-length: 460861
content-type: image/png
X-Firefox-Spdy: h2
tm-offers.gamingadult.com/?offer=123&uid=ce7c6cfd-c3f0-4336-83d0-1a4ce275b06d&subid=10255318fcfbf1b3d74cba636b6bfb&utm_source=148260&lp=352&utm_term=25736
302 Found 0 B URL HTTP/2 tm-offers.gamingadult.com/?offer=123&uid=ce7c6cfd-c3f0-4336-83d0-1a4ce275b06d&subid=10255318fcfbf1b3d74cba636b6bfb&utm_source=148260&lp=352&utm_term=25736
IP
GET /?offer=123&uid=ce7c6cfd-c3f0-4336-83d0-1a4ce275b06d&subid=10255318fcfbf1b3d74cba636b6bfb&utm_source=148260&lp=352&utm_term=25736 HTTP/1.1
Host: tm-offers.gamingadult.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 31 Mar 2023 22:40:33 GMT
content-type: text/html; charset=UTF-8
location: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
set-cookie: HH-offer123=1; expires=Sat, 01-Apr-2023 10:40:33 GMT; Max-Age=43200; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
www.hentaiheroes.com/affiliate/LP6/assets/3-Loot.png
200 OK 0 B URL HTTP/2 www.hentaiheroes.com/affiliate/LP6/assets/3-Loot.png
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /affiliate/LP6/assets/3-Loot.png HTTP/1.1
Host: www.hentaiheroes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/affiliate/LP6/?ref_id=135846&noagev=1&tc1=HH32f9cfd2bd50e585b2c032e9910162a9&tc2=8&tc3=123&tc4=SOI&tc5=148260&tc6=&tc7=&tc8=
Cookie: HAPBK=web10|ZCdhZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 22:40:33 GMT
server: Apache
strict-transport-security: max-age=31536000
last-modified: Tue, 26 Jun 2018 09:55:10 GMT
etag: "14e06-56f887e5fdb80"
accept-ranges: bytes
content-length: 85510
content-type: image/png
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Carter+One
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Carter+One
IP
GET /css?family=Carter+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hentaiheroes.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 31 Mar 2023 22:40:33 GMT
date: Fri, 31 Mar 2023 22:40:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
143.204.55.43
23.36.77.32
104.18.32.68
5.196.166.128
94.75.250.120