track.indotimely.com/75606f4b-de91-4969-8a79-2b4a1271c2ea
302 Found 0 B URL User Request GET HTTP/2 track.indotimely.com/75606f4b-de91-4969-8a79-2b4a1271c2ea
IP
Certificate IssuerLet's Encrypt
Subjecttrack.indotimely.com
Fingerprint53:06:E7:8F:60:A2:58:DF:72:2A:41:95:17:0D:12:F3:64:D1:0D:22
ValidityWed, 21 Jun 2023 02:30:06 GMT - Tue, 19 Sep 2023 02:30:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /75606f4b-de91-4969-8a79-2b4a1271c2ea HTTP/1.1
Host: track.indotimely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 26 Jun 2023 21:16:23 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
pragma: no-cache
set-cookie: 75606f4b-de91-4969-8a79-2b4a1271c2ea-v4=n7VL9pjsEhu9vQhuU88cLCUCQReoN1v7BnMdVHPgRlY; Max-Age=86400; Expires=Tue, 27-Jun-2023 21:16:23 GMT; Domain=track.indotimely.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=fK1zOpiXeE6MeDpevpxx2LFPJ86zL0w42qqQgAoAANGcwFpOXWHEgHNksq1ZEP2oTaHNVollSyJlkVCrFt9lCCjnRlzqM99qTd_iCGqcpbdLwDg_R6xr3qhNZB4nmQwyNIjRmuJPHjM7osdeXSToZMYOEgFMp_36G0NYFW4JADoH4l67mSBrEWe5hIPp3cvTuJgmC3auVVqhkq8RJqjnEGN8wCxnjUqoU2SDlbV2dSsHnFl7Et-czhFoRf2YWg6BLgeB9oIZL8FLTOG4KjoS2Xlg-haX_ozpcmhyvND2nT-rs9D9e9yzxFzdjBWkEzf7HM5sWI9PqUza1yiR7XI_0nf8owlwuOioj1RDdFUlX9a4b0z5CKith7XP7SQxIcq9T6a8_sg9vXqLPvnVReQjPg; Max-Age=86400; Expires=Tue, 27-Jun-2023 21:16:23 GMT; Domain=track.indotimely.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash d0d82e244b9beae9d1d681ad1fb3e72e
34662123c5d822343b6792ab9ac419e5a7766a8e
b98362b2743f9f803c415daf2e3091d12628e8f0933fd7a885c1dffcd2ad8933
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Mon, 26 Jun 2023 21:16:23 GMT
Server: ECAcc (dcb/7FD4)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QWyXUDIgDLjmD2xjILSUYwATmH5knM1fTnVj8oatdCCLEN_4i4HjbQ==
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/flag.png
200 OK 396 B URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/flag.png
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type PNG image data, 35 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 4946ce8ece16515620550ffaa4794454
a2ce2cc55eb329be83209b35501cf23f0f8a0891
8d39313e9143edeee5d38c05fce025fa4edffd461b46ddd6bcc9a7eddcc50e0f
GET /sweeps/ID-GC-AnimationFlag/flag.png HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 396
last-modified: Tue, 20 Jun 2023 08:38:38 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Jun 2023 06:02:31 GMT
etag: "4946ce8ece16515620550ffaa4794454"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZlM4fFizph-UVqouKiqy_tsJeKQWwWGvLU1fYKuvqbsNZbXtD9kpHg==
age: 54832
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/q1c3m.png
200 OK 7.3 kB URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/q1c3m.png
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type PNG image data, 300 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash d84d1874f1a38fbb80b820059445661f
878fa51e6ed44d0cbaa38fc634af2b8bc0fc1953
4f81f34cc38e2c6b9db3375743f9ef8b63b31de609d50b2c6dd54515f8440d2e
GET /sweeps/ID-GC-AnimationFlag/q1c3m.png HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7259
last-modified: Tue, 20 Jun 2023 08:38:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Jun 2023 06:02:32 GMT
etag: "d84d1874f1a38fbb80b820059445661f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LpmDh3o8JL8pX8WTCEsR1hu1opmExq76YnSwxGJiva0EqsO9hhgeMw==
age: 54832
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/w9e8j.gif
200 OK 636 kB URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/w9e8j.gif
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type GIF image data, version 89a, 800 x 600\012- data
Size 636 kB (636270 bytes)
Hash e9c2b911f7146d835ac0020b436d34e9
8a5e8a2275c780ffc650615325b6213d6e35d8f0
a79832a29a4c866c3f7830f60abfa91a89367ab6af66786104d92d85a9ff50ad
GET /sweeps/ID-GC-AnimationFlag/w9e8j.gif HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 636270
last-modified: Tue, 20 Jun 2023 08:39:06 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Jun 2023 06:02:32 GMT
etag: "e9c2b911f7146d835ac0020b436d34e9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2l1cI5tpAC52cBnFs4tXzZEHp23JeQp_ZJp6cZ4vdtJu2uu7YXVsvQ==
age: 54832
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/v5z4l.png
200 OK 8.7 kB URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/v5z4l.png
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type PNG image data, 395 x 77, 8-bit/color RGBA, non-interlaced\012- data
Hash bec6b8eab9d6e094df42a0e1b8230994
2ef289afa287fa1e905a9eb520974fb963c1fe98
ca9a2744b49c225c39ddd78239e2b4e1703f2f8ee03d6bc22a9f53532ac94046
GET /sweeps/ID-GC-AnimationFlag/v5z4l.png HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8660
last-modified: Tue, 20 Jun 2023 08:39:01 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Jun 2023 06:02:32 GMT
etag: "bec6b8eab9d6e094df42a0e1b8230994"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: na4oK2q87ZR_EE45TZRFPLwRP7y3NfP0iuAgVfQnNskRJyw4G6QZHQ==
age: 54832
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/u7k2n.png
200 OK 48 kB URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/u7k2n.png
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type PNG image data, 414 x 736, 8-bit colormap, non-interlaced\012- data
Hash a66a7278909b71cde6a87ae400e2de8b
1d936c9181a86fc7d77dc67ad3a3f2d194557253
52e9e7f992721ed81bdb6146fe578eb67437eeb378d7c87a46928996ff219b1c
GET /sweeps/ID-GC-AnimationFlag/u7k2n.png HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 47495
last-modified: Tue, 20 Jun 2023 08:39:00 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Jun 2023 06:02:32 GMT
etag: "a66a7278909b71cde6a87ae400e2de8b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P93tMJ00T3OWKyq2hSwk6P9DGB6tFPl9PWONq6p_cs41H0_RqzSeyA==
age: 54832
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/s4v9u.png
200 OK 96 B URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/s4v9u.png
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type PNG image data, 16 x 16, 1-bit colormap, non-interlaced\012- data
Hash 35b9ee99fe32d3d68f7807c43d768092
99e01d3e0c461a43735019cc73db8074aa7ab504
cfee15b8d3ffca2475ecab6e25900ed1454d9c327fca1942728629452ad00ee6
GET /sweeps/ID-GC-AnimationFlag/s4v9u.png HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 96
date: Mon, 26 Jun 2023 17:41:57 GMT
last-modified: Tue, 20 Jun 2023 08:38:54 GMT
etag: "35b9ee99fe32d3d68f7807c43d768092"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vogmK9WO-z_6-SG1o4wcK8uK7RLrxBlGlQCsPJ9L5_szowoXrZDgNg==
age: 12868
X-Firefox-Spdy: h2
hop.greenbluefrog.click/js/pub.min.js
200 OK 1.5 kB URL GET HTTP/2 hop.greenbluefrog.click/js/pub.min.js
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerLet's Encrypt
Subjecthop.greenbluefrog.click
Fingerprint42:AF:A5:E1:24:5C:CD:3F:B8:A2:0D:AC:BE:FF:5C:BA:75:23:E2:7C
ValidityWed, 21 Jun 2023 03:15:51 GMT - Tue, 19 Sep 2023 03:15:50 GMT
File type ASCII text, with very long lines (2752)
Hash 842d4889c73f6664245d70112389026a
3f5d934289e1acfebce633760640881a81ac8299
99f43e50f4179af4ebf4c93668866d5a5607914fa0a5daa087354c3159d3fa03
GET /js/pub.min.js HTTP/1.1
Host: hop.greenbluefrog.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 26 Jun 2023 21:16:24 GMT
content-type: application/javascript
content-length: 1482
last-modified: Fri, 09 Sep 2022 11:46:08 GMT
vary: Accept-Encoding
etag: "631b2780-5ca"
content-encoding: gzip
expires: Tue, 27 Jun 2023 21:16:24 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/style.css
200 OK 2.1 kB URL GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/style.css
IP
Requested by https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (2209), with no line terminators
Hash 6c7316551a225c924b2d0f81a635fe72
a7a7ad3d94cb8ed525b22568b9ad55a5d3de2b6c
5be8256165f781b43e68b014e76758b34bdc5f37f83db2d3abb23c4d78bc9e30
GET /sweeps/ID-GC-AnimationFlag/style.css HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 20 Jun 2023 08:38:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 26 Jun 2023 08:18:42 GMT
etag: W/"9886e762bdc40ce165f5c2e5535e148c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wBtlGXchj-U9QE30H8QRjDiEWRjnVq4VkJy5VaqjTBQOZ9jv4gCLrw==
age: 46662
X-Firefox-Spdy: h2
www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
200 OK 2.9 kB URL User Request GET HTTP/2 www.luckycow.shop/sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3
IP
Certificate IssuerAmazon
Subjectluckycow.shop
Fingerprint8E:DE:90:80:C8:BC:F8:F3:AB:7A:B6:52:43:92:68:52:E2:6F:5D:05
ValidityTue, 29 Nov 2022 00:00:00 GMT - Thu, 28 Dec 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3025), with no line terminators
Hash ba971326bd00882dee2f1e4a4987ea95
9cc6033f59194ea4aff21eb9698988da35352e13
99afade2e1d3ab1f306f6deff9ae5435d3b617e6f65cab207c09a6356281e723
GET /sweeps/ID-GC-AnimationFlag/index.html?cep=1UmDDQ9u66fHq4y9OKS3oftRAdgHO35tNEEhQYLLF88cZtVEuYq6iF8jDaSc3iSnw47p0Uq7lokircGXmVHUoXVMLQQVcCFWPhno2Ko44ZAk5O_XuPpISznsN2tODIaALcXyI7q43428E8xyvLg3kFdT_bwxJpje2UOXN0ibdErqLCbVme0kPxZ8YPP8QgXPXvmVJppRW3UgucyW4oza6h77eMxa6detP9q2VUDA7pQ2XlVMG3_Ev1k3uYUk0q1qt1APb21H_CassA2UhWueh6Wi41ovEN6IgAKcn6fncWAurwjFvWuOrC0CLf5Vw_fZaaPNH9iiiqPZjxzMmwd0n-dJboZAp3xcoJ7RN0ACZ-0nV448YHPMdekC9vkGqrY_sFwTkYFbLeR3W6UrDdyiMg&lptoken=1687877481fa598f83d3 HTTP/1.1
Host: www.luckycow.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Mon, 26 Jun 2023 02:38:27 GMT
last-modified: Wed, 21 Jun 2023 11:09:03 GMT
etag: W/"edd2c16564d1052a616267d3467c46d9"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4Qg8k0zb8ykx62brhbknBM5ilu8N6jKT9PEwdiNk5NCZO_paTRwiTg==
age: 67077
X-Firefox-Spdy: h2
18.195.23.231
54.230.80.227
203.253.31.114