www.ducumon.me/2021/10/ducumon-iku.html
301 Moved Permanently 0 B URL HTTP/1.1 www.ducumon.me/2021/10/ducumon-iku.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2021/10/ducumon-iku.html HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 21:59:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 28 Jan 2023 22:59:43 GMT
Location: https://www.ducumon.me/2021/10/ducumon-iku.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TYKkiFI%2F28Ix18OVKhxiBxBN8B1ZMeWZ%2FswAY9asFzW8OA38xs%2FpYuJiYnA%2FP8G5vxRnp5M34EGcnY0gIJWimjK6Kkk0u%2F3eof%2BVhLUPEheBOfPXSRM7HbQ7mtZTH7SO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790cff33da59b51e-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2473
Expires: Sat, 28 Jan 2023 22:40:57 GMT
Date: Sat, 28 Jan 2023 21:59:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3257
Expires: Sat, 28 Jan 2023 22:54:01 GMT
Date: Sat, 28 Jan 2023 21:59:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 21:43:06 GMT
content-type: application/json
age: 998
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6800
Expires: Sat, 28 Jan 2023 23:53:04 GMT
Date: Sat, 28 Jan 2023 21:59:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8DlW7U/RhnxMkXrYHdCf7CWRiYPdku5Yc5YGARFXUHT3ZlFMW3HQj4U5lnu7jW8+COgBUjZBUFWKL+OJ5GsDBQ==
x-amz-request-id: WHAA718EFT82TE7X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 21:50:04 GMT
age: 580
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 74ec8a845234a9d44b0319c7c5dff653
953f7b04fd9682e6ad2664e5680fd5f906befc12
eb3384800ee2ddd9796336dfb0baf364bfd13af33814825c623c848f2c65fc92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:44 GMT
Server: ECS (amb/6BB8)
Content-Length: 278
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
z9v5j9a5.stackpathcdn.com/wp-content/plugins/gp-premium/secondary-nav/functions/css/style.min.css?ver=2.1.1
200 OK 1.2 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/plugins/gp-premium/secondary-nav/functions/css/style.min.css?ver=2.1.1
IP
File type ASCII text, with very long lines (7359), with no line terminators
Hash 071c8261afb63ae13c477aabab9b995a
ea20b8a151b5bd6d1e71ccc5f8c374c76533a521
73f3506a25fedd6c25bbf1f5f049a89a510e79fb7b3da522b3b2789913278f76
GET /wp-content/plugins/gp-premium/secondary-nav/functions/css/style.min.css?ver=2.1.1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
etag: "1635877865"
content-encoding: gzip
content-length: 1247
content-type: text/css; charset=utf-8
last-modified: Tue, 02 Nov 2021 18:31:05 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 421
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gUlCLc1bRmX82n2oUpTjDoy%2BB5nLR%2FozdRBGoMza66VDg6kyHCm1z6dTtU8xbWOT3FDMd9sU7uAksP2qYE6z4lkCkt8kQKPhoJ8E4zuiVbiw95i3vP1uBNWP5Sc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 748e2cf50ccfbe5b-CPH
server: fbs
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds013.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/plugins/gp-premium/secondary-nav/functions/css/style-mobile.min.css?ver=2.1.1
200 OK 512 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/plugins/gp-premium/secondary-nav/functions/css/style-mobile.min.css?ver=2.1.1
IP
File type ASCII text, with very long lines (1912), with no line terminators
Hash 5c269e6d3433297fad636c6422c5c4ab
e4ea5e818f858b33787e32d8d47ff789e1b3cfbc
9f586b85725e9ce9c672ba504a0294c4e014b86157016442f0fb732865da9320
GET /wp-content/plugins/gp-premium/secondary-nav/functions/css/style-mobile.min.css?ver=2.1.1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
etag: "1635877865"
content-encoding: gzip
content-length: 512
content-type: text/css; charset=utf-8
last-modified: Tue, 02 Nov 2021 18:31:05 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 421
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWzaGM2fMba0Qsak4qdlxvUkST2G3x3AzV%2B9sGp7XMOU%2BZphrx9lOa5OJDOfFypVdNcdPiLE4TLCwCTwh4BO04hoL0qZ7hIqOS7l5JN8PThKZ9PE%2Fhe0yFF4q3A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 748e2cf51c00b80f-RIX
server: fbs
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds237.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/animate.min.css?ver=1.1.3
200 OK 2.6 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/animate.min.css?ver=1.1.3
IP
File type ASCII text, with very long lines (16755)
Hash f33cff0ba0b03380f6b6c50146faf5ee
77c05a2304724273f1145f3dfc660f59fa5d17eb
427029b71729b61a7369a51140e9141a75403e2f5d1cb12f3ccde0384bc41418
GET /wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/animate.min.css?ver=1.1.3 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
etag: "1620027326"
content-encoding: gzip
content-length: 2621
content-type: text/css; charset=utf-8
last-modified: Mon, 03 May 2021 07:35:26 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UeEXbD4iyBE%2BJjoNCYMuqDhNFmrzybnXl6%2FA6XEEDAorZu4LUnuJ4MR9A3YU5RRIX8bMApXnWqemOFYF5i932dDa%2BJckSGYNgm53aecZBcihASPYk2gy%2FgBFIFs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 748e2cf50d8fbe3d-CPH
server: fbs
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds067.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
z9v5j9a5.stackpathcdn.com/wp-content/uploads/2023/01/LyingerOfflineAds300x250.png
301 Moved Permanently 4.7 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/uploads/2023/01/LyingerOfflineAds300x250.png
IP
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash c11db7983430b48af429ec1d2dbe2283
996d106c00d0ccc20086c948fab55b05a4e593e5
de961d9a1ae4dc41c14f0454663f8adc6db10f8fed40c59fb080a0af24f08ee7
GET /wp-content/uploads/2023/01/LyingerOfflineAds300x250.png HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/uploads/2023/01/LyingerOfflineAds300x250.png
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FhqSeS5XPdfooEylBcfnVAKsl8KPfSX%2FdSC%2Bvdgt5bWhhPB45NAcIAlatX3Tk1N9VHjrCosudLmptkP65c92ufVWZ6TbovbB%2FohDpqv3ath2eo5sLwoXaE0366Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39a931b4cc-RIX
server: fbs
set-cookie: SPSI=b40f259d864f49d69adea0888e55c41a; path=/; HttpOnly; SameSite=Lax;
SPSE=JfMWh7WIC8SagMzZzTNEipDm3XeRvOkBx55k3OUGvywLcB9jnWoY0p9doXR+2Y8LV1FH5Hsw8jeCS1uL1mmEFw==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds014.sk1.sc,1674943184.cdn2-redis02-arn1.stackpath.systems.-.wx,1674943184.cds014.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-awesome.min.css?ver=1669465270
301 Moved Permanently 59 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-awesome.min.css?ver=1669465270
IP
Hash a9dac34b8970a943fa1e6de109c58b18
ab89b52952f54157fb5fb384d971fa5310658208
c1f40a6ca10a3c77977f670c050c9a370d17bc5a9f549f25bba0c11869b7e5b7
GET /wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-awesome.min.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-awesome.min.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U5GYd5jNWXJldkMx1BuayfTCz3bs8R1Q8KVcmo%2F9bprxgUZZkl3dGMOlM4pubHRfFZtXaWvvGgHZ%2BRpwh82CRpeiKu%2BldICQzmG2i9mtQuiekqcHB0oV5Vpy83s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff398fc3b80d-RIX
server: fbs
set-cookie: SPSI=f5d7c4cc62762fa31d417522082ad8a1; path=/; HttpOnly; SameSite=Lax;
SPSE=KMRoIyo47SnPB1izJhafABetDzOmR2CWtyS2mYG+13ydKSLymwaSDcCtKzTUWgElnCwMBMOSoMhnOxwKi4AuDA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds202.sk1.sc,1674943184.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1674943184.cds202.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
301 Moved Permanently 84 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
IP
Hash deded65eabd3b52c08dc666169291bf9
0ee124bb4b6dce9d70668cb9c04ec528ea05d0e5
3803375cb2ec81f3846064ff817493c98907a44233501ddedabf83b1aecc8ddc
GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgYVTMFSyQNwDM2CVPtDGVcmeSPKui%2FESRQjZX%2B8LhdVAKio%2BLGjd4HFjVWtCKO1lAbaEZfm%2Bq0A7iBr4M27WZ0JXOaY5Hzv8nLSQUOY3jfR%2FXxRon%2Fvd%2FnLqBM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39a930b4cc-RIX
server: fbs
set-cookie: SPSI=77e4ddf22b467ca3b748a13cf3a7bde6; path=/; HttpOnly; SameSite=Lax;
SPSE=KMRoIyo47SnPB1izJhafAK4GYJm8ue0JMqa6ax5LxoqdhKD/Dsd3SufdZh4X5LvkRsbe3agMyuvaToaTkobhVA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds256.sk1.sc,1674943184.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1674943184.cds256.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
301 Moved Permanently 299 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
Hash a4e88af6c1ee15ab4e32c8083ffb94fd
2d1cf696b68493e1f4d5b2343797cd2aa06435f3
caff78e435bb0667674efcc54b472274031ff09e7b144518faaa23a391c8180c
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JgDYdsgENbAGRyaIoCjva1pWl4bzcihbn8nnzZLaZJH1HJr%2FruCsSd2JeR6rIqjqdVCIuYyYwettJJn%2BhOA3odJMFI5zpKfcW7Az3wM9gqx%2BYpepoAdmHt6Z6OA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff399ca1b4c6-RIX
server: fbs
set-cookie: SPSI=b1968ef2d5a528e23540a4413f0745ba; path=/; HttpOnly; SameSite=Lax;
SPSE=etYpimQEDNsjpluuQ9rlt84hdESAOsKIiJocucDVLYTWzeQvFc9R2ELiCH/t67Kn+9YUeK+NIjDJiKMKvyx/eA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds213.sk1.sc,1674943184.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1674943184.cds213.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-includes/css/classic-themes.min.css?ver=1
301 Moved Permanently 492 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 48aaab38615c017495d6eef2cfa16ec4
49efdf3bbf113bc38dcebc0457bde5f2708a7b37
51242b2a7e1dbdd45237d37614898756864214743bdded92ed460039994c9879
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-includes/css/classic-themes.min.css?ver=1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T7QIJuPiIBEeI8XPuAhjPUStXHzx0N0JVos%2B2siz%2B3ODGerxSujQnv050uYwIZIvuuVrUPs3C34KyyHCkl5w2O0zK8y0AjuP27OV8fggYv6wxQs%2F9oeti99P7jE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39be0fb804-RIX
server: fbs
set-cookie: SPSI=69f6f55fe5a8d226614e0e4355ef262d; path=/; HttpOnly; SameSite=Lax;
SPSE=EMyH6Zlfs722OrjSlNFeN2w2eWcGBDtSIbmbj2k+Odc6B2m5QsZhnEGeYlGeZG+od/Qy9VFGvDCxmgNXVmgskA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds252.sk1.sc,1674943184.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1674943184.cds252.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wpforo/themes/2022/widgets.css?ver=1669465270
301 Moved Permanently 349 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wpforo/themes/2022/widgets.css?ver=1669465270
IP
Hash de8bd075fb9d137a49f3fabde2805461
19fe9f46b81926e70879d13d05cfbd5448853910
23f28a755286f0519823f1c05281a850cc6cffccc2bff0680544260d6c8d4096
GET /wp-content/cache/min/1/wp-content/plugins/wpforo/themes/2022/widgets.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/plugins/wpforo/themes/2022/widgets.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GLR46jGwDKCA4UQWMY0db9ggCnQ42iElILdW0ORnWn2IosTvj%2FbLROhkMGw4AFPk4hbElB8JnSdLozdPq9slF3aVd8Mwl%2BdUfuvSiYckBc%2FO%2BT79icZr9yOinv0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff399da9b80a-RIX
server: fbs
set-cookie: SPSI=30ba7031e17561ccd568bd0cbcc7b5cc; path=/; HttpOnly; SameSite=Lax;
SPSE=gfTaM+BVpok2IntIRK4vmtmWwRQhrf4oZOAfxjeaLhM783NAAnVY78kr6GVXCuEi8vpojj3VrMkL7ghDcW7UOg==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds014.sk1.sc,1674943184.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1674943184.cds014.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:52:41 GMT
expires: Tue, 23 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 443224
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash a284c127535ab1c2d0a2d5717745578d
d41c896dd69db5dbc1ef79e5758979c38acc2dc1
9d452f96dc5be59bfea3f43e19bf086583d98dd07db3cd54d946873d2ba85e16
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4883
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Etag: "63d44dd3-117"
Last-Modified: Sat, 28 Jan 2023 20:38:22 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
www.ducumon.me/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 13 kB URL HTTP/2 www.ducumon.me/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 47d25a70b72c26be3fa62be809a5db27
e39d551370efcda278adab297425b124a6afc249
2b3a85aa139e875ff854dc8ce559df6f2682c4ea918ac2733e21e5097f415b85
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: text/css; charset=utf-8
last-modified: Tue, 15 Nov 2022 20:49:22 GMT
cache-control: public, max-age=31536000
expires: Mon, 27 Nov 2023 10:40:50 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5397534
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7rj4iQt67tKoWW5HyEuVu185PF9eyb%2FnHg6%2BNGw%2B2fVu0VtuSsQcNvpWBKUwA4UzNPawCzRn3Vk0cb%2BmnUN6dHhfcePIwwLVEIxWOLbriMpdvquDiWZc9PCaQhXrdEra"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff39e911b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/assets/fonts/awesome/assets/v4/css/font-awesome.min.css?ver=1669465270
301 Moved Permanently 523 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/assets/fonts/awesome/assets/v4/css/font-awesome.min.css?ver=1669465270
IP
Hash b8bd5c11af0ad75b8f75bf65aff5e078
eed9d7b9d2171eb626b4c7ddbbfe61f7ee11ce13
c4b2d166307f8b1df2054aa9a92c4a2d3eec7be6185b80bd18ebd482d92dbf50
GET /wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/assets/fonts/awesome/assets/v4/css/font-awesome.min.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/assets/fonts/awesome/assets/v4/css/font-awesome.min.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2BIcKcjBnhv2Gz6O5j9UKnLc1wZbtox0GqTkrj5O00bh4K9EjLuBP%2BNJsfr7dDnkh8Tm9cndpJRugm7Nu9ou8ZiOmRNPBI%2F5BwjjWWhI9xcwkI2JATi3nnlgDHY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39ff7fb8c4-AMS
server: fbs
set-cookie: SPSI=7ec88a0d04ebfef24076f9bf5f8b8f04; path=/; HttpOnly; SameSite=Lax;
SPSE=iU/NpNF9dEp2B6aflgONE2bTatUYQsfQ6WGXt653Okkbpv1GmmA3Lmz7w3un6i7G4OZp7cZ2bAs6WQcWRzPl+A==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds219.sk1.sc,1674943184.cdn2-redis02-arn1.stackpath.systems.-.wx,1674943184.cds219.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/spr_columns.css?ver=1669465270
301 Moved Permanently 491 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/spr_columns.css?ver=1669465270
IP
Hash 8269e4b456727542e4a1c8c300b56630
b5aff5a81b5d958bc40a90866171da3a0d1231f2
e1315eb94fddb2ca69d4c96bec59d2553c8089a1b12b36294ce90db46bae55e1
GET /wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/spr_columns.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/plugins/wp_pro_geo_targeting/includes/extensions/spr_columns/assets/css/spr_columns.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C4XHwT5HBUFsOrN7%2FoOMPZxYGsR9m08ZfpE9pbAjufr5kEhdZRkm5n4sWmS4wuFCLca7JSRupz3uQEtSvIsNMFSPDn9O92T8TmoEItXGxWMpGviQwLnesne%2Bl7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39f9f7b7ca-AMS
server: fbs
set-cookie: SPSI=1172e0a07c86550aa139da235d33d9de; path=/; HttpOnly; SameSite=Lax;
SPSE=KMRoIyo47SnPB1izJhafAJ1r1L5hrc8VH5UXb+tVY45wdU9+MX6o/ubb4wfIVPbpdoHQfx3gUwRoAs7Ou82zkA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds065.sk1.sc,1674943184.cdn2-redis01-arn1.stackpath.systems.-.wx,1674943184.cds065.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed8a8c45dceab588456b222e04775919
0242859712655caa3c3e9b936878c7c7874b7b5a
669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-44810371-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-44810371-1
IP
File type ASCII text, with very long lines (1759)
Hash f16fdbf06d4c689711b3a21d963099a9
591392d1988e9f7a6118c5fae811bde63e21bd08
cdb06d96a469f10a475e601aecdd0653e4dfd666a75aab4203bb368e91eb5442
GET /gtag/js?id=UA-44810371-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 21:59:45 GMT
expires: Sat, 28 Jan 2023 21:59:45 GMT
cache-control: private, max-age=900
last-modified: Sat, 28 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44062
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8a6331ed48be29c59230b0c7360068de
22a20436f427d6b8e26eb30ed9aab51a43d389bf
72f0818ab04697fc29d331b2add584f3cd5e269446c7297300701a4666c9d95e
GET /s/player/4248d311/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/581GdsuMua4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49911
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 17:26:43 GMT
expires: Fri, 26 Jan 2024 17:26:43 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/css
age: 189182
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
301 Moved Permanently 110 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
Size 110 kB (109452 bytes)
Hash d6caee460f42e3f535622716d8377848
8f115ad0afb256ccf6963ad75d309b3336ae1bef
4aa261dd441970128c0e8db001b9ab239cf59ff1c2185e3e4e81b64251275ad0
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:45 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7YU96Humpd26R7fJ3VrcXj3syePYeScA3JweuJVnUWJ6PLpPDJSsFt%2FE05rRIvsu59lszfJYIX0DELv8wlqGJvnNgthWc%2BoXHEHnh5I74ri5yRHkiI2l4UcI0yg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff3cdbdeb4ba-RIX
server: fbs
set-cookie: SPSI=64dab5ce421a34d282f103f2fc033958; path=/; HttpOnly; SameSite=Lax;
SPSE=HNJ8ES9/iKTOQrEDZEq8t9iNbHSmz77Awl/KKVc6g5SyJlPCJeMV5LrQDfjeiAm9DqLdptuFddZ3SfVjbtc/ug==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943185.cds071.sk1.hn,1674943185.cds263.sk1.sc,1674943185.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1674943185.cds263.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 173502
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:40:43 GMT
expires: Fri, 26 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 191942
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/581GdsuMua4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 20:21:26 GMT
expires: Sun, 28 Jan 2024 20:21:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 5899
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39375)
Hash 00424d8e4851366129916317c4d17343
4d7c96e81b1bd8934d6a267f92ecb6941fd5861a
f560c22b331d8fb4de1462b248d11a42714f16e17e811cfad3d3379db01b13da
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27594
date: Sat, 28 Jan 2023 21:59:45 GMT
expires: Sat, 28 Jan 2023 21:59:45 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1466 / 554 of 1000 / last-modified: 1674860937"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nPch4uPwmvAYsJEoknplRw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +Ep2zy16x+gkc0a8eJ03sTN7NBw=
www.ducumon.me/wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png
200 OK 16 kB URL HTTP/2 www.ducumon.me/wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58ecf3d2c3c5da601d8e8b87010d887e
ad828cd69c140586085852bf3e270cb39f792086
487b7811b040ba5b77fc32e782f297307e9cfa798e902a595c7371d3606856cd
GET /wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:46 GMT
content-type: image/png
content-length: 16061
last-modified: Fri, 03 Sep 2021 18:22:24 GMT
cache-control: public, max-age=10368000
expires: Thu, 25 May 2023 22:56:23 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 255803
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B4VOnufVcVjeRyp1v%2B%2BXAvps82HuzPJwfaA4qyyM5PFeDw%2FsMHLancFk8Cceb2EkiINgxlhnK3uYeLKzA4XwI%2FknlChBe1ykeHrLeoDb6zyKpK8k5GNjDx4iqZW%2B15ed"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff410c82b517-OSL
X-Firefox-Spdy: h2
vuukle.com/getGeo
200 OK 1.5 kB IP
File type JSON data\012- , ASCII text
Hash c7a044a0e80a464f2c8a6389653b4ac6
b956063d2acf2c2fcde97b72f22841ce2bcebb49
b4312cdd9cbc11c42f7efe9ccf585fa38b1ec94c69e443b8801d9660e507e44a
GET /getGeo HTTP/1.1
Host: vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:45 GMT
content-type: application/json;charset=UTF-8
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-max-age: 86400
vary: Accept-Encoding
server: cloudflare
cf-ray: 790cff3dbfcf1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f69c5f43bf99edb53b690cb0bba51efb
e303559ff0956b6bf963b572b17da2a713ce5206
bc95b0a6b8b9a1df9c53272c4324ca1d008699b3da74110efa37ed0118c66181
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ducumon.me/wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js
200 OK 37 kB URL HTTP/2 www.ducumon.me/wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js
IP
File type ASCII text, with very long lines (65439)
Hash fc362e29123560b621957ec55817292f
6b7d1cd01803614e24ddace449b69386ffcb8a77
c9321a8bf0fa96797f1607edf84b33d3cf794e994984b490b92b63035162bd05
GET /wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:45 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 28 Jan 2023 14:55:30 GMT
cache-control: public, max-age=31536000
expires: Sun, 28 Jan 2024 15:00:59 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 25126
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1zyJBQk6D7R7B%2BN09wAWbK6qdFndexq2TlV3hKGFCHAQ3HBsv8OB2GAzCwpGxdrbLupHZr3tgfEtYIM6sVvgLLNHSH6g5%2FyWcZmWxlNiTN0CFbcyXi8GbWtbUFdIfynJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff3d2e1bb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 1.5 kB URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 935a1f824100bbdf42e127804428719e
ab91ec0763aadbd62abab0c7f397248ddcc87b99
8167d68d66dc22123d63316079a7cbc7908824acff4c058c5f07f7a9cd777ae4
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 21:57:52 GMT
expires: Sat, 28 Jan 2023 22:12:52 GMT
cache-control: public, max-age=900
age: 114
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f69c5f43bf99edb53b690cb0bba51efb
e303559ff0956b6bf963b572b17da2a713ce5206
bc95b0a6b8b9a1df9c53272c4324ca1d008699b3da74110efa37ed0118c66181
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 28 Jan 2023 21:59:46 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d4c6f0f0c6e95f6205a4bdc89425ccd4
788b3ce0e7e23c320d4b677db410b892ab0ea970
b05f7a469ee4d5bcf7542a65a773f03950798b4711cd6ed0c2c59c147c771787
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 21:59:46 GMT
server: ESF
cache-control: private
content-length: 30738
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.ducumon.me/wp-content/themes/generatepress/assets/fonts/generatepress.woff2
200 OK 9.6 kB URL HTTP/2 www.ducumon.me/wp-content/themes/generatepress/assets/fonts/generatepress.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 1264, version 1.0\012- data
Hash de53a0eaac053d93afaeea0dba8e775f
ff414f7765731dfc5d19027116cc36727625f408
59e31a9fc29e4c734056e4f86d7d190ee87e65abebf56b71b38a3d44691652af
GET /wp-content/themes/generatepress/assets/fonts/generatepress.woff2 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:45 GMT
content-type: font/woff2
last-modified: Wed, 23 Nov 2022 11:06:13 GMT
cache-control: max-age=10368000
expires: Sat, 27 May 2023 16:38:56 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 105649
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ALMV6Ukr%2F1%2F51zFv%2Fapcie%2BfwibcV75sbV15Rh4lxyUrQkm31ZBxiLE08fPsEeSVx87rfhdRl2o%2BTkQGXeNvswJE08A7coN19r6ip2rhM%2FIyTR9M36pOCkSwJeqwcdD3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff3bdbf8b517-OSL
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/uploads/wpforo/assets/colors.css?ver=1669465268
301 Moved Permanently 491 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/uploads/wpforo/assets/colors.css?ver=1669465268
IP
Hash 4f05b337f2227cbe6a999652014292d4
70193692e585d86705e9766680c65b7023da7095
8e67afe46494454756c885753ea2d96d979a3e44a8a30dd111af24e7f111dcfc
GET /wp-content/cache/min/1/wp-content/uploads/wpforo/assets/colors.css?ver=1669465268 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/uploads/wpforo/assets/colors.css?ver=1669465268
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=591UFcxBry5%2BnObWMX2QGWkA3F9D3w%2Fdzigo6nSDjlgNChB0SCz5YxD8oZQYXM0i%2BO9Y%2FvINwZYvlEVrHPT6RRsK3OJ9MB9DKnwof1qxR7wXpO8F5mr8iBDl5pc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39e83c0a60-AMS
server: fbs
set-cookie: SPSI=009bb9eb74f2c4b0282bcf0db45aa5cd; path=/; HttpOnly; SameSite=Lax;
SPSE=jIiysLOeSwCmrOHmLssQe9Crh4igb+OlsHJXJTYiFC88jItFmwbFYIj0VdEHykoax3ItPzPkrRh8wXpAYKAT7g==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds264.sk1.sc,1674943184.cdn2-redis02-arn1.stackpath.systems.-.wx,1674943184.cds264.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
IP
File type ASCII text, with very long lines (36171)
Hash a13a76dd17af226d4a24bd16ef702377
c364171cd0f66eb4a1a8dde04e1e083154d81dbd
1dd3352cbdb7561b142954006a2bb94008486c22760c3d5ebb1b6fffeb325173
GET /js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14250
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 18:38:28 GMT
expires: Sat, 27 Jan 2024 18:38:28 GMT
cache-control: public, max-age=31536000
age: 98478
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d2ade408af91f717110cf07d8d89c02a
997134ef254ea49d8aa40d48e55a715e06f9c315
81199c2fc337d94312e50e72a57ccf22e2f47060ddbd623ae9d836f24410a55a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
200 OK 28 kB URL HTTP/2 www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
IP
File type ASCII text, with very long lines (3268), with no line terminators
Hash 84d80d71900827af1b47f549eb6882e4
b599944a5133d1c4ed94d757b81933c86186e9af
6a6ed0309ca671aa0c0370a6a084fb38b7400674e5234bc00b16f0f961645c00
GET /wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 26 Nov 2022 12:21:10 GMT
cache-control: public, max-age=31536000
expires: Sat, 16 Dec 2023 13:47:46 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3744718
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lREdTjpUlDNCT0agWLmlV0QQHoEYWQaZZuv3Utq5Ikq3ljKeb0ARggm4wtM9sTooHUL1AakvZ3xsEw1HsPqr%2FQYvXMKddd9fUY05ngWQcXEMZd8r1YRQ%2BiBVvct4gdl%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff39e900b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/581GdsuMua4/maxresdefault.webp
200 OK 88 kB URL HTTP/2 i.ytimg.com/vi_webp/581GdsuMua4/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 368ed42b43e0e633d16ebe38984b2266
f3ed77fe26c92016da0d790aaf4d44926cf5c3e9
16da4cefd8f5fc255f98484dd178e15581cc061c3430ebfe3b403b632624960c
GET /vi_webp/581GdsuMua4/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 87668
date: Sat, 28 Jan 2023 21:59:46 GMT
expires: Sat, 28 Jan 2023 23:59:46 GMT
cache-control: public, max-age=7200
etag: "1633613822"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d2ade408af91f717110cf07d8d89c02a
997134ef254ea49d8aa40d48e55a715e06f9c315
81199c2fc337d94312e50e72a57ccf22e2f47060ddbd623ae9d836f24410a55a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 075c77699a1d40bc8998915458a53a8c
07f453f1c78996c443e396a908e677bf6b73005b
4b9e1dc07acb7ceb15c0b34c1a3fb576d0555cba4d7e43935e0ae4ffe37eada5
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 21:59:46 GMT
server: ESF
cache-control: private
content-length: 30858
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7c4f207ec97cacb1eedd94d2f6b371
5f0948a39435ace8bacc4ac5fb3df19045908e42
bfb24fe4a1cb45a068b0a6432b03c20d00ea178aabea23498f2d1f0273bf6e1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/gTizw1molZAOWrXLhtjehdnme8wDgrFUrEs-tR6QdNxtwD4qkxhx32rfeT15PqIQmSSScmAX=s68-c-k-c0x00ffffff-no-rj
200 OK 3.4 kB URL HTTP/2 yt3.ggpht.com/gTizw1molZAOWrXLhtjehdnme8wDgrFUrEs-tR6QdNxtwD4qkxhx32rfeT15PqIQmSSScmAX=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash a4135f3a158cdbcc7e50c1342bd92f4e
0d7554b78fbec8150bdfccdf3f993669e346ad3e
996c3131cd388f195eacbb64b17c4f705a77e61db1e1cba7d3a0c475a93555bf
GET /gTizw1molZAOWrXLhtjehdnme8wDgrFUrEs-tR6QdNxtwD4qkxhx32rfeT15PqIQmSSScmAX=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3366
x-xss-protection: 0
date: Sat, 28 Jan 2023 19:05:47 GMT
expires: Sat, 28 Jan 2023 04:18:06 GMT
cache-control: public, max-age=86400, no-transform
age: 10439
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7c4f207ec97cacb1eedd94d2f6b371
5f0948a39435ace8bacc4ac5fb3df19045908e42
bfb24fe4a1cb45a068b0a6432b03c20d00ea178aabea23498f2d1f0273bf6e1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cd215828aa6ae3730fdd878830ddd02b
69e14ef2c36cbe95b49acbb4ac76f151d186b187
48114d2790709b751180d91cedffe9dd0553e3f30af5b864fe3aa6be0c1a7b71
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1296
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 21:59:47 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3df90db43761d58ea8253ff7a9844f0b
125b6c84f65e9d2e9c870b4925d958419b0977c9
af277592fa49bcea2a82a3a39b412c8064f885948a042be3b6e674d8cf575bd7
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 916
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 28 Jan 2023 21:59:47 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6950
Expires: Sat, 28 Jan 2023 23:55:37 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6950
Expires: Sat, 28 Jan 2023 23:55:37 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1b66f2ccb0017b06d5e5903e00dede4
f3c7c1abdbab6510de54727cb68eedcc3103e1ce
44d84a015c27d9a298a2ef891e46f2fdd7764d45d914689e127244fef96ddd27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8149
x-amzn-requestid: 8c634b51-b124-4cf9-b20e-897babf98d0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: feRtIG3sIAMF-rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d59653-3f20abcd6c56307b1ebabf2b;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jpe_r8O7AjOS1Mg4kmgDCvxstulkpZI9DXkagbRPmrgyjgwVbDFuog==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
etag: "f3c7c1abdbab6510de54727cb68eedcc3103e1ce"
content-type: image/jpeg
age: 791
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57ff6665d99a17d06b75c8fe64c90ab3
05648eed6830a794aa7e30ba4da526ed4c45b0ca
728b809756a0faff1a55bb03f13f33e31518f321e50dd944a0267d585c09264c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: 8117f45b-926a-4cbe-b152-dae983bc3526
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOYdlG6XIAMF_vA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf3abd-7ce531f65f66ac3a73970841;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 01:56:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: naZHCCrUSwrLi2eWi3LOrir9zOGQcNUBJ1iS9wUewWoV3WM2E0kE2w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:47:00 GMT
age: 767
etag: "05648eed6830a794aa7e30ba4da526ed4c45b0ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6950
Expires: Sat, 28 Jan 2023 23:55:37 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6950
Expires: Sat, 28 Jan 2023 23:55:37 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f73f114f8dc452fc0b16825570ad50c
6bb1b3db6c36e2c9d23b6cb7d1c8616eeec19575
23fd69e6ccdd2ce2b5d3d8b3f075a07cdb36efd663a4119b5dca22165e7b2090
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10030
x-amzn-requestid: 0c6c82b5-f91b-4468-bb25-d87d4d7dedd5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVAbgERRIAMFdcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1e116-7f17c79047447dff2de3ab67;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 02:10:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pHTs5LN29bSjD8GAXY_vstXiEQ7iy9qXsq23Pxl-GdXX16_5H5QKCQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 16:13:35 GMT
age: 20772
etag: "6bb1b3db6c36e2c9d23b6cb7d1c8616eeec19575"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7433eb3123a1f9b14507c78e38e7b9
fef8b905b580999963758a56be9c3226697929a2
895298ddf6822e9f95e10fe17c1ade0b0782c3753e96eab8a3798df5ba969dbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6518
x-amzn-requestid: 6e9c624a-2036-4161-ad9e-1c66068e3eb1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPHz0HmsoAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf867e-011e1c43072a8dfa22af6e88;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:19:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AxIaCwORa7FhDY5pxcNlrPMoam0z7DxSgKBytx5AG_qcKrxM8NnoOw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
age: 791
etag: "fef8b905b580999963758a56be9c3226697929a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ducumon.me/wp-content/uploads/2023/01/reisendergehads300x250.gif
200 OK 63 kB URL HTTP/2 www.ducumon.me/wp-content/uploads/2023/01/reisendergehads300x250.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash 6b969d43b253bad9b2b76b26bd474423
2983a51829d88ba77de39742f98ec36047ae8237
1843d8aff0520cc75f23de7f21f8b3438f89d03d0711bc951c34a52724df2b3e
GET /wp-content/uploads/2023/01/reisendergehads300x250.gif HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/2021/10/ducumon-iku.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: image/gif
content-length: 63150
last-modified: Sat, 14 Jan 2023 14:27:26 GMT
cache-control: public, max-age=10368000
expires: Tue, 23 May 2023 14:57:26 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 457341
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gn%2FYmo62ChbLXVyaNlSInbPGGIBhd40sRxH2%2FTZl9IXZ%2BRZNlMf7InegfhQ%2BY9J%2BkttgdjVFab4pg8ZHa31uQDmYidvPtYUEacHQObRQz5Mf15CCJ1%2BsvBebV%2BkLYi1q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff49bfafb517-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d19ea264e32a923808112293d74b97c7
19a01a961cca989ee07ff53e50d6f2e65d73729a
16792f5d3ff24bda8f7ac4b6b522c736c4e070b5aa9fd109fa868906064278c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5021
x-amzn-requestid: 040ca906-0e98-4919-a238-06ad180d6260
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcj5zESeoAMFqUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4e6a4-7f81446e78d233f16fc9b73f;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 09:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XeoloS-lP9UvWYMvblLHSIJdYMAU3yDj5AmJsYwxHtH3l2UjMkkung==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
age: 791
etag: "19a01a961cca989ee07ff53e50d6f2e65d73729a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ducumon.me/2021/10/ducumon-iku.html
200 OK 0 B URL HTTP/2 www.ducumon.me/2021/10/ducumon-iku.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /2021/10/ducumon-iku.html HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/2021/10/ducumon-iku.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: text/html; charset=UTF-8
last-modified: Sat, 28 Jan 2023 14:55:46 GMT
cache-control: max-age=0
expires: Sat, 28 Jan 2023 21:59:47 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxUyu6B4%2FZKWKVjzYvRWmZpAjw93gmXNSnzuNSFxbgtlVZhKXCtyon4JnPaxKYHFN0762B5DhnxWPNgxAa4TXOFY0lbcAHF1%2FvFP7YegP%2BxkK62wDdGJPw61BarLOk4S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff499f6db517-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 4411
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2aac206151d0f417f81f079590ea00b
fee877cdb5b98c5120b9770db05d82e9b1d34cb8
5f63b21fdc446816f29964df359297f9926c2f168b0f0e26325a4c2e76c01a84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F63B21FDC446816F29964DF359297F9926C2F168B0F0E26325A4C2E76C01A84"
Last-Modified: Sat, 28 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17958
Expires: Sun, 29 Jan 2023 02:59:05 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b25b86e8a7a6d53c2f39dc29e4a0e14
dcb0d8503e58194766b8eb69874fb825b5cd1699
1fc3ecdb0c3577f79f383e5ab472c24520b70fbe7b67da5d0f51198f62817677
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1FC3ECDB0C3577F79F383E5AB472C24520B70FBE7B67DA5D0F51198F62817677"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18244
Expires: Sun, 29 Jan 2023 03:03:51 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
intorterraon.com/tag.min.js
200 OK 24 kB URL HTTP/2 intorterraon.com/tag.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash aa6ace1fab6b79d01a592237fdf403ca
dfb899b26b603ebe3a6999ade7c7c358d2b79f6b
e46b518362df138baca64438cdfab42250333c74626e784e574c0c9ce44087ef
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: text/javascript; charset=utf-8
content-length: 23483
content-encoding: br
x-trace-id: a231135de849ecf852a9867a05dbdf6d
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 27 Jan 2023 14:27:19 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tg1.vuukle.com/api/adserver/spt?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a
200 OK 5.1 kB URL HTTP/1.1 tg1.vuukle.com/api/adserver/spt?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2004)
Hash 2453d330028022ed95351a0fae2f4e67
49ad37fb416f65bf17e7d6039ff39dc95f2d1368
58a0f48f134ffe529559c68cd369096507efe64497b7309c2ce0dfbe0f466edf
GET /api/adserver/spt?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a HTTP/1.1
Host: tg1.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Access-Control-Allow-Methods: GET, POST, DELETE, PUT, OPTIONS, INDEX
Access-Control-Allow-Headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With,avsptstaging
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 5103
Cache-Control: max-age=300
Expires: Sat, 28 Jan 2023 22:04:47 GMT
Date: Sat, 28 Jan 2023 21:59:47 GMT
Connection: keep-alive
Vary: Accept-Encoding
publish.vuukle.com/bq-publish?callback=&{%22action%22:%22ads_block%22,%22hashed_email%22:%22$dabc0e-55f3-43c8-b508-ac5d13cec01c%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%225164c7d4-5938-4d61-93f3-ba02a6b87d55%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741
200 OK 0 B URL HTTP/2 publish.vuukle.com/bq-publish?callback=&{%22action%22:%22ads_block%22,%22hashed_email%22:%22$dabc0e-55f3-43c8-b508-ac5d13cec01c%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%225164c7d4-5938-4d61-93f3-ba02a6b87d55%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bq-publish?callback=&{%22action%22:%22ads_block%22,%22hashed_email%22:%22$dabc0e-55f3-43c8-b508-ac5d13cec01c%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%225164c7d4-5938-4d61-93f3-ba02a6b87d55%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741 HTTP/1.1
Host: publish.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:47 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.ducumon.me
x-xss-protection: 1
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 790cff4b0b641bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
IP
Hash 702c2948177031d46d4c83e99b5ed7b0
858a062e8fa69334df9b34203349dc7c595c5f6b
aefdd8f7107efd57817fa1cf9315a9ee248fc074b34f2ea285702542413385b0
POST /s/gts1p5/K-jlOqKn9CY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 28 Jan 2023 21:45:20 GMT
expires: Sat, 28 Jan 2023 23:45:20 GMT
cache-control: public, max-age=7200
age: 868
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ab744f1fbf03bf793085117f6691a062
f26ee7a876fee3e80c2521374a4c527d55b17e83
fc5b8cb6f5bd7396921cac6bf1bbd6cb41715cdcd19527ae5310e59eafd07928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC5B8CB6F5BD7396921CAC6BF1BBD6CB41715CDCD19527AE5310E59EAFD07928"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7790
Expires: Sun, 29 Jan 2023 00:09:38 GMT
Date: Sat, 28 Jan 2023 21:59:48 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
IP
Hash 702c2948177031d46d4c83e99b5ed7b0
858a062e8fa69334df9b34203349dc7c595c5f6b
aefdd8f7107efd57817fa1cf9315a9ee248fc074b34f2ea285702542413385b0
POST /s/gts1p5/K-jlOqKn9CY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.rtmark.net/gid.js?userId=435804c6a7fd4d13969ce50aecf2fab5
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=435804c6a7fd4d13969ce50aecf2fab5
IP
File type JSON data\012- , ASCII text
Hash f7213d883b8c53fefa6e98c0e44725ac
1adf33d31a04d39960fe425bb5c5e89cff2b3d6e
2e1532d3209dd62902bf0900cc6b4435b420fe1c9314ddd7e82d98196137ccbf
GET /gid.js?userId=435804c6a7fd4d13969ce50aecf2fab5 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 21:59:48 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.ducumon.me
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=435804c6a7fd4d13969ce50aecf2fab5; expires=Sun, 28 Jan 2024 21:59:48 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
player.vuukle.com/script/6.1/player.js
200 OK 10 kB URL HTTP/1.1 player.vuukle.com/script/6.1/player.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (29653)
Hash 23df8eecda3801170c5c312d3fb3bbfb
81467f3a3ff592014a43b5d3074f9dfbea088683
8d0c2ccdbbba08aa075ee0fa3632e1a2309aea8aa450806fd61ac8a4dfacce4a
GET /script/6.1/player.js HTTP/1.1
Host: player.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycds38UO7bmXkupapteFZXxsAOYsqh7PbGSI9sF9kJYGjFx0uSOJAzexvNWQm-qQr3V-NWXllvg1BugWo5Un0wcI2Dg
x-goog-generation: 1674370389335912
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 10399
Content-Encoding: gzip
x-goog-hash: crc32c=uDDKVA==, md5=I9+O7No4ARcMXDEtP7O7+w==
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 10399
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type
Server: UploadServer
Last-Modified: Sun, 22 Jan 2023 06:53:09 GMT
ETag: "23df8eecda3801170c5c312d3fb3bbfb"
Content-Type: application/javascript
Cache-Control: public, max-age=600
Expires: Sat, 28 Jan 2023 22:09:48 GMT
Date: Sat, 28 Jan 2023 21:59:48 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8fe07d7a62495296a807c8353e4a7a10
5385b712f9979f0ab42b24511561ef91ef6fc089
97a4b07c54514fae9c651079450d050f16069b8bcef955dd47375550f49f5085
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125013
Date: Sat, 28 Jan 2023 21:59:48 GMT
Etag: "63d4cdaf-1d7"
Expires: Mon, 30 Jan 2023 08:43:21 GMT
Last-Modified: Sat, 28 Jan 2023 07:24:31 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PssHi6KARwA-T5XHhLQF3VvUF723WdkcCi1C-1xP7ckiqXFooFjxSw==
Age: 4730
servt.vuukle.com/track?pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&cb=1674943192497&r=www.ducumon.me&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d65=&e=playerLoaded
200 OK 0 B URL HTTP/2 servt.vuukle.com/track?pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&cb=1674943192497&r=www.ducumon.me&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d65=&e=playerLoaded
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&cb=1674943192497&r=www.ducumon.me&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d65=&e=playerLoaded HTTP/1.1
Host: servt.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
www.ducumon.me/cdn-cgi/challenge-platform/h/g/cv/result/790cff367c5ab517
200 OK 50 kB URL HTTP/2 www.ducumon.me/cdn-cgi/challenge-platform/h/g/cv/result/790cff367c5ab517
IP
File type ASCII text, with no line terminators
Hash c4a277a459fb4f870a51ef3d66d57aa6
347c7eda197ec8df1fd07aabba372aee3e7ece52
127d1cc5d675b80afb753b5ec4c4387fe404049c848cf663c463d35d25fb2b7c
POST /cdn-cgi/challenge-platform/h/g/cv/result/790cff367c5ab517 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12368
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/2021/10/ducumon-iku.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=1g.gCpwT.dmzGm2KPY5WW9Kcz8WI4hKwA5_mZjpvnC8-1674943188-0-AWU2GYA1mCNDTiUDsSGOS67sMRgqliZAViJU+HPinTOJRiji9ykfp+jOu3OBIqwCbeBnsYypKjd4h5C3r6/fBnU9WlcWAdzcBqmcSjSnDYJO5ESkgzxNn8dKEO2qlKbM0owL6caWp9g1fzjKm8OeIKU=; path=/; expires=Sat, 28-Jan-23 22:29:48 GMT; domain=.ducumon.me; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S5AGW0xPL%2BiR%2B7uWU6y03O4jvfvU8e7VHGgVyXdxGjy3%2Fca2llT2Ut4k3sLaakygl52vwfsx3d47%2BnPQLE9bY18pt3yufBlRQ%2BwBQAZ%2F2pYRP7MCdp5go0%2FjIlNZEs%2BU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff5129b5b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d93f9158021621640788165d5bdb62f8
9b8e621250006a9f705c7b6d12f9e660d2d42e03
9d5c28f8d4a14c137c66d15c0b37b5428ba12772eb9de8c0be82b87767932448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5418
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:48 GMT
Last-Modified: Sat, 28 Jan 2023 20:29:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
player.vuukle.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=607eaa2728f57c570863c77a
200 OK 120 kB URL HTTP/1.1 player.vuukle.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=607eaa2728f57c570863c77a
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (44568), with LF, NEL line terminators
Size 120 kB (120414 bytes)
Hash 2b0c238b3dc9f4f63bb646d142755200
e21b21d2e256142e082f495540940f87f1759853
8436d1eb3070657621184b39afded4ea5aaa42e9bbbb425bbdcabfb26a5639cb
GET /script/6.1/AVmanager.js?v=1.0&type=s&pid=607eaa2728f57c570863c77a HTTP/1.1
Host: player.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdva3xtJniMqHATWlLsxfuwjUsVP_BeJBXlpYcpbWSvWw2OKbMAGGDLEKuWs3UXEgN4fl70EcbyyEmHWxRYLwp2COw
x-goog-generation: 1674370388847774
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 120414
Content-Encoding: gzip
x-goog-hash: crc32c=a8nUEA==, md5=Kwwjiz3J9PY7tkbRQnVSAA==
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 120414
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type
Server: UploadServer
Last-Modified: Sun, 22 Jan 2023 06:53:09 GMT
ETag: "2b0c238b3dc9f4f63bb646d142755200"
Content-Type: application/javascript
Cache-Control: public, max-age=600
Expires: Sat, 28 Jan 2023 22:09:48 GMT
Date: Sat, 28 Jan 2023 21:59:48 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.digicert.com/
200 OK 313 B IP
Hash 04c624d8879f883e20d8df7051843b37
0ba630a4f0865b761623030784e2b931cc6bfe1f
de8698a1e78247e0fbbe185a542c8ba7dcde748c3e84a5f636d2c6a6a10aedd1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4956
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:48 GMT
Last-Modified: Sat, 28 Jan 2023 20:37:12 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 280 B IP
Hash d93f9158021621640788165d5bdb62f8
9b8e621250006a9f705c7b6d12f9e660d2d42e03
9d5c28f8d4a14c137c66d15c0b37b5428ba12772eb9de8c0be82b87767932448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5418
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:48 GMT
Last-Modified: Sat, 28 Jan 2023 20:29:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 314 B IP
Hash 4d08df7a08aba618dc2931e09c2a9c9a
5c0e0ea828f5c769eb45c3c499fad469f20b6d7d
a4fba084caab6f397be9161b8fdf281cc7aafd588fb32d55b6ae50cc44e6b0bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3653
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Last-Modified: Sat, 28 Jan 2023 20:58:57 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=d-sRCV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlJdUx6a1Aza1NMUUolMkZHc0JtMHNnc245MHplVVpLcmdQdFV6aTI4UHh5Tg; expires=Thu, 22 Feb 2024 21:59:49 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.ducumon.me
server-processing-duration-in-ticks: 282122
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
play.aniview.com/607eaa2728f57c570863c77a/607fe73886f9bc60e66237eb/Vuukle_Logo.png
200 OK 2.0 kB URL HTTP/2 play.aniview.com/607eaa2728f57c570863c77a/607fe73886f9bc60e66237eb/Vuukle_Logo.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 70e93cb7c40233baa5b4491131508d88
89c262c0b86558255893c143d02528a5e1836df6
261e918e8e6767d021cb4dc761152a7d09ea8d298288776ac2fea357e7801d45
GET /607eaa2728f57c570863c77a/607fe73886f9bc60e66237eb/Vuukle_Logo.png HTTP/1.1
Host: play.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:49 GMT
cache-control: max-age=1800
content-length: 2011
content-type: image/png
last-modified: Wed, 21 Apr 2021 08:50:07 GMT
accept-ranges: bytes
x-guploader-uploadid: ADPycdv8Z_Z-8d7F2pB_0Qf86y6LWBeFXbLwskMujH--eDE1opNvae_RHqaMq4wp5UIMT7st9gc51YlAzexuAEK2Xwar
etag: "70e93cb7c40233baa5b4491131508d88"
x-goog-generation: 1618995007463943
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2011
x-goog-hash: crc32c=76+VqQ==, md5=cOk8t8QCM7qltEkRMVCNiA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Type, range
server: UploadServer
x-hw: 1674943189.dop219.sk1.t,1674943189.cds243.sk1.hn,1674943189.cds246.sk1.c
X-Firefox-Spdy: h2
servt.vuukle.com/track?r=www.ducumon.me&sn=&ic=0&tgt=0&app=&wi=400&he=225&test=&d36=6.2.76&apppkg=&fv=1&proto=https&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&e=inventory&vi=100&cb=1674943193488
200 OK 0 B URL HTTP/2 servt.vuukle.com/track?r=www.ducumon.me&sn=&ic=0&tgt=0&app=&wi=400&he=225&test=&d36=6.2.76&apppkg=&fv=1&proto=https&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&e=inventory&vi=100&cb=1674943193488
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?r=www.ducumon.me&sn=&ic=0&tgt=0&app=&wi=400&he=225&test=&d36=6.2.76&apppkg=&fv=1&proto=https&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&pid=607eaa2728f57c570863c77a&cid=60c0a82f6f57a64acb1d6317&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&e=inventory&vi=100&cb=1674943193488 HTTP/1.1
Host: servt.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:49 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&gjid=107380182&_gid=2093165592.1674943193&_u=YEBAAUAAAAAAACAAI~&z=1308151169
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&gjid=107380182&_gid=2093165592.1674943193&_u=YEBAAUAAAAAAACAAI~&z=1308151169
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&gjid=107380182&_gid=2093165592.1674943193&_u=YEBAAUAAAAAAACAAI~&z=1308151169 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.ducumon.me
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 28 Jan 2023 21:59:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7da7d1d3e5880d5d4e313ac7fcf2a83
60a1e887ccb7c7cdae0035c65ef7df9908547fef
af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1
200 OK 56 kB URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 46da6a4b6a3f33d1357945b06be37b6d
7610f3a8c2559b3fc1e440b6cc22132a668d565b
2887ac95bc44646a8b96b7c10c8c5a3a003f027953e1ac714dc047a09293ea69
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.ducumon.me/
Origin: https://www.ducumon.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://www.ducumon.me
server-processing-duration-in-ticks: 415366
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&_u=YEBAAUAAAAAAACAAI~&z=872521729
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&_u=YEBAAUAAAAAAACAAI~&z=872521729
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-44810371-1&cid=586033045.1674943193&jid=212044332&_u=YEBAAUAAAAAAACAAI~&z=872521729 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 21:59:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a4.js
200 OK 21 kB URL HTTP/1.1 player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a4.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65297), with no line terminators
Hash 493a64d2d3c06eadd00273744523be73
b24d8d4491a0ecf1d8216c551ad3269c14e2f7b1
94ceaaf6d68263e1a62558f988081bcad919b6ec586481d3c3ee1a8b4f796f96
GET /script/6.1/libs/prebid/avpb7.12.0a4.js HTTP/1.1
Host: player.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycduFGC32XxT6l8_ECScFthtqWoKa3ZVqbY4WVWpoSj85cQB9Ip02Bjw_A0W35wgg7w7ud5fOaGSWZTYOzGUZOkYo4Q
Last-Modified: Sun, 22 Jan 2023 06:53:10 GMT
ETag: "493a64d2d3c06eadd00273744523be73"
x-goog-generation: 1674370390139681
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21089
Content-Type: application/javascript
Content-Encoding: gzip
x-goog-hash: crc32c=HdFrfw==, md5=STpk0tPAbq3QAnN0RSO+cw==
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 21089
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type
Server: UploadServer
Cache-Control: public, max-age=600
Expires: Sat, 28 Jan 2023 22:09:49 GMT
Date: Sat, 28 Jan 2023 21:59:49 GMT
Connection: keep-alive
Vary: Accept-Encoding
serv.vuukle.com/api/adserver/tag/?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&AV_CHANNELID=60c0a82f6f57a64acb1d6317&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.ducumon.me&AV_DADPOS=1&AV_PLACEMENT=1&AV_TAG=60c0a88e7b21b51e39691b38&AV_TEMPLATE=607fd3693ad8d148f72c16d6&d36=6.2.76&responsive=1&sver=4&avtoken=193486&omv=1.0.1&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&AV_WIDTH=400&AV_HEIGHT=225&AV_DNT=0&cb=1674943193489&wfc=1
200 OK 9.5 kB URL HTTP/2 serv.vuukle.com/api/adserver/tag/?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&AV_CHANNELID=60c0a82f6f57a64acb1d6317&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.ducumon.me&AV_DADPOS=1&AV_PLACEMENT=1&AV_TAG=60c0a88e7b21b51e39691b38&AV_TEMPLATE=607fd3693ad8d148f72c16d6&d36=6.2.76&responsive=1&sver=4&avtoken=193486&omv=1.0.1&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&AV_WIDTH=400&AV_HEIGHT=225&AV_DNT=0&cb=1674943193489&wfc=1
IP
File type JSON data\012- , ASCII text, with very long lines (20408)
Hash 26bb979466d83883cfa4eba68d4f94db
1b24469cb3c4d50eb78b22033f78263796885e2a
b7d10afeb3a8a8f9d67a625fe557a11a50c840791eea5846c7ffcc02a845505a
GET /api/adserver/tag/?AV_TAGID=60c0a88e7b21b51e39691b38&AV_PUBLISHERID=607eaa2728f57c570863c77a&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&AV_CHANNELID=60c0a82f6f57a64acb1d6317&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.ducumon.me&AV_DADPOS=1&AV_PLACEMENT=1&AV_TAG=60c0a88e7b21b51e39691b38&AV_TEMPLATE=607fd3693ad8d148f72c16d6&d36=6.2.76&responsive=1&sver=4&avtoken=193486&omv=1.0.1&clsid=c04d9302-a22a-43ea-b437-21a43fa06134&rando=16&AV_WIDTH=400&AV_HEIGHT=225&AV_DNT=0&cb=1674943193489&wfc=1 HTTP/1.1
Host: serv.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:49 GMT
content-type: application/json
vary: Accept-Encoding
set-cookie: aniC=1674943189424-967135221947-001140-000-009025; Expires=Fri, 17-Feb-23 21:59:49 GMT; Max-Age=1728000; Domain=vuukle.com; Path=/; Secure; HttpOnly; SameSite=None
aniC=; Expires=Fri, 17-Feb-23 21:59:49 GMT; Max-Age=1728000; Domain=vuukle.com; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX
access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With
access-control-max-age: 1728000
x-bamboo-c-s: BYPASS
x-bamboo-c-skfe: 1
x-bamboo-c-skst: 1
expires: Tue, 17 Jan 2023 08:13:09 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
www.ducumon.me/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 32 kB URL HTTP/2 www.ducumon.me/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 09a75230ee3ecc960bd860c312d34b15
3d9a13bcc27abe3b799f7edbcf40d504d1ba6dea
34bc34ff814d9dc56ec380cc10cdb933f17b7ae516ff4f0ea9742e9eb8e522f0
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:45 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:02:24 GMT
cache-control: public, max-age=31536000
expires: Tue, 23 Jan 2024 13:57:21 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 460944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EV8X9%2FmOmHXuyTkYVqJTwzOBpEGQ%2Faa8dCp5LI7P78ROMZlo65tnZl1SGKBiVFUzU3I9xyjsZdk0vSTbkYcnk7Ze9u6Hi8iB9%2Fu4L5kk%2FGMoloy9fGj%2FHk%2Bc0S0eiZNM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff3d3e27b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a6.js
200 OK 16 kB URL HTTP/1.1 player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a6.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (54042), with no line terminators
Hash 816d9bbf27e94e3f423c50cde2c48c1e
a2791c5d7dc51c026301281ca1da260994c03a83
cb5cf6c2433897908fc824500e8161c8a43edafc2cdc5ccadaff435740a997f7
GET /script/6.1/libs/prebid/avpb7.12.0a6.js HTTP/1.1
Host: player.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdsF6Zt6Enn27riGfMUsDAf2dAXY8zSBuehuKkJ34R5wTrYjOjh2MJE-XvR4K0zscEf6T6kLTTMTWogdZcx9r-MsKg
Last-Modified: Sun, 22 Jan 2023 06:53:10 GMT
ETag: "816d9bbf27e94e3f423c50cde2c48c1e"
x-goog-generation: 1674370390164588
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 16393
Content-Type: application/javascript
Content-Encoding: gzip
x-goog-hash: crc32c=iq0lKg==, md5=gW2bvyfpTj9CPFDN4sSMHg==
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 16393
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type
Server: UploadServer
Cache-Control: public, max-age=600
Expires: Sat, 28 Jan 2023 22:09:49 GMT
Date: Sat, 28 Jan 2023 21:59:49 GMT
Connection: keep-alive
Vary: Accept-Encoding
player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a1.js
200 OK 20 kB URL HTTP/1.1 player.vuukle.com/script/6.1/libs/prebid/avpb7.12.0a1.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (63517), with no line terminators
Hash 47e083d9c81aa01c881257f4480c8145
b3faf5d57fcead8f3f186faf74f8a705c6e12d01
7dfa81a6f54f155753d4b6bcf7d1579430c2d66a801d4cc302818ff481fe1288
GET /script/6.1/libs/prebid/avpb7.12.0a1.js HTTP/1.1
Host: player.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdtSPQvhegMrZrr8PRyaKP7ZFD-fG9OhJm1ggGHKV-Alo25_qg4uBpcZePWMssFt4QGnkzUJk2T3o7NOmgt--Wutpg
Last-Modified: Sun, 22 Jan 2023 06:53:10 GMT
ETag: "47e083d9c81aa01c881257f4480c8145"
x-goog-generation: 1674370390143908
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20495
Content-Type: application/javascript
Content-Encoding: gzip
x-goog-hash: crc32c=kwhjhA==, md5=R+CD2cgaoByIElf0SAyBRQ==
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 20495
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type
Server: UploadServer
Cache-Control: public, max-age=600
Expires: Sat, 28 Jan 2023 22:09:49 GMT
Date: Sat, 28 Jan 2023 21:59:49 GMT
Connection: keep-alive
Vary: Accept-Encoding
id.a-mx.com/sync/?tagId=&ref=null&u=https://www.ducumon.me/2021/10/ducumon-iku.html&v=7.28.0&vg=vuuklehb&us_privacy=null&gdpr=0&gdpr_consent=
200 OK 24 kB URL HTTP/2 id.a-mx.com/sync/?tagId=&ref=null&u=https://www.ducumon.me/2021/10/ducumon-iku.html&v=7.28.0&vg=vuuklehb&us_privacy=null&gdpr=0&gdpr_consent=
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c68473421a07c8f8bfa907236ca8f778
4c9e281b147539839052194508dcb91a3f280bd4
bbc56672a235e6384e6f947f4121d1352172a684c7b8f7d052dc4b70a24b3aa7
GET /sync/?tagId=&ref=null&u=https://www.ducumon.me/2021/10/ducumon-iku.html&v=7.28.0&vg=vuuklehb&us_privacy=null&gdpr=0&gdpr_consent= HTTP/1.1
Host: id.a-mx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: private,max-age=3600
access-control-allow-credentials: true
access-control-allow-methods: GET,OPTIONS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5cKJJqgG0V7S8gt%2F2QQGmEgHvNl4UdY4Nom%2FS8IcqOt2Xb6IlUjdT5SQEcsDrI%2FcGmw3V5IU9UQ8jsqe0BjTAcUYDMCqI8ipyLIOo5X7Usq%2FEdhm4HYmjERulwPyEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790cff524e92fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6dc58e758ed52d1989669c8f61a821ef
d43c374f872456426bb135d8f090d595dda25204
cda1d2b9bc4299b3ddf9b089c4f2444da080139eec22ab6af83dff81df69815f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5660
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Last-Modified: Sat, 28 Jan 2023 20:25:30 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 471 B IP
Hash f95c57388f28cef8d93f1e9446bee567
69561b687f5a7ed6a2f51b4af0d90fce829c74b4
a0f09b46d6a1e69ad90ce65f7339ba0eda1a28725ab61024b0b14a894fa35365
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4488
Cache-Control: max-age=124057
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Etag: "63d4cae6-1d7"
Expires: Mon, 30 Jan 2023 08:27:26 GMT
Last-Modified: Sat, 28 Jan 2023 07:12:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7da7d1d3e5880d5d4e313ac7fcf2a83
60a1e887ccb7c7cdae0035c65ef7df9908547fef
af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13b22234229d52b71291f47e4fc59200
dc17e2aad840341d1b4c4f83b913afdd5a4a0902
11049f21f8b5ee1daa216b73eb4c60208ab6ed7a0400b6d8b420ff6252857b3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11049F21F8B5EE1DAA216B73EB4C60208AB6ED7A0400B6D8B420FF6252857B3A"
Last-Modified: Thu, 26 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17425
Expires: Sun, 29 Jan 2023 02:50:14 GMT
Date: Sat, 28 Jan 2023 21:59:49 GMT
Connection: keep-alive
onetag-sys.com/usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1---
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
t.adx.opera.com/pub/sync?pubid=d803647ecdd74c26863bfc1198f6567b&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D128%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BOPERA_UID%7D
400 Bad Request 42 kB URL HTTP/2 t.adx.opera.com/pub/sync?pubid=d803647ecdd74c26863bfc1198f6567b&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D128%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BOPERA_UID%7D
IP
ASN #39832 Opera Software AS
File type gzip compressed data, max compression\012- data
Hash 427a7ea270714fba67e1df0e28f6e713
5344f5da5ccf0d75bc0ee8c4e99ff2f80819303c
5c896e7ba80d43a4a787371b1be7863b9e4d3740c88e56a1fe976e77532673a2
GET /pub/sync?pubid=d803647ecdd74c26863bfc1198f6567b&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D128%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BOPERA_UID%7D HTTP/1.1
Host: t.adx.opera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
server: Tengine
date: Sat, 28 Jan 2023 21:59:49 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With
access-control-allow-methods: POST, GET
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: UID=OPU14f0ff8c1d7241489ed3f38a65b02b02; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash ccefce3e2d533b3ad7bcfd5721807c50
c5bc309b1b69ac0d2b9c852ac90dc205d7751d02
e1b0528efc847eea32f4b995490b109c75244f7838021234a3c1b231df4c85af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 21:59:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 13:55:53 GMT
Expires: Sat, 04 Feb 2023 13:55:52 GMT
Etag: "c5bc309b1b69ac0d2b9c852ac90dc205d7751d02"
Cache-Control: max-age=575162,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790cff57c98cb50f-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash b643015e7a91817c9be1f84884720383
a33027ba5ca88a9837faabf208f765411b175b1f
16805245da364a693269abf44d7862d35203feae0decb0cda3f18fc01d8a7af9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4506
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:49 GMT
Last-Modified: Sat, 28 Jan 2023 20:44:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
csync.loopme.me/?pubid=11455&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D56%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%7Bdevice_id%7D
307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?pubid=11455&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D56%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%7Bdevice_id%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pubid=11455&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D56%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=247464a8-bf58-4bad-b138-0db2e8fd383f; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Fri, 28-Apr-2023 21:59:49 GMT; SameSite=None
location: https://servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=56&auid=1674943189424-967135221947-001140-000-009025&key=247464a8-bf58-4bad-b138-0db2e8fd383f&gdpr_consent=null&gdpr=1
content-length: 0
date: Sat, 28 Jan 2023 21:59:49 GMT
server: _
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58543/occ?gdpr=1&gdpr_consent=
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58543/occ?gdpr=1&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58543/occ?gdpr=1&gdpr_consent= HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:49 GMT
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
age: 0
server: ATS/9.1.10.25
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 17dc3f0a06ef0e980dd5288de9b114c4
a648dea75e86bb429e3d0713287000d77c4a7006
d45925d2f258c434cf27ac87e6f6b94d5b5c8a10e52f14b7175c79b7d6629e41
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 28 Jan 2023 21:59:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 28 Jan 2023 20:22:04 GMT
Expires: Sun, 29 Jan 2023 20:22:04 GMT
ETag: "a648dea75e86bb429e3d0713287000d77c4a7006"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash fe7e756f0256e0560fe6c962c89f0812
8c060a2654a82e893cd2c7f8791b5500153fd01a
2a164fca6c7462ae2747aedd172dba2807f5fcaef459f2f263fc6fe15ab5b674
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 28 Jan 2023 21:59:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 28 Jan 2023 20:08:11 GMT
Expires: Sun, 29 Jan 2023 20:08:11 GMT
ETag: "8c060a2654a82e893cd2c7f8791b5500153fd01a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ap.lijit.com/pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D18%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D18%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D18%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sat, 28 Jan 2023 21:59:49 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap3ams1
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.ducumon.me&pubid=842701b4-f689-4de3-9ff4-bc1999093771
200 OK 736 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.ducumon.me&pubid=842701b4-f689-4de3-9ff4-bc1999093771
IP
File type JSON data\012- , ASCII text, with very long lines (736), with no line terminators
Hash 55e50ed765a66672775cc0084ac09861
843905b68f0e5f4adf62d4b3cec47e500d170532
1f77f5c23d0edea570ed2e21fce2f9c7c97dcddf9c0c207ff18e39fd59839314
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.ducumon.me&pubid=842701b4-f689-4de3-9ff4-bc1999093771 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 736
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sat, 28 Jan 2023 20:46:00 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ml2K4n7GdxOIuqDVZlT5jYMvxZm-uytMyQyuFTHptJo10_AkoEZgcg==
age: 4428
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4d58b1248799e7a16bd8578528899c66
97516097daa4325cf13da1afbc3a5c4dd9f5c2bc
eb4d0090d6c27e8ccf6af95c37f2e13620205567d1ba3699dec91d2bcbe40767
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 21:59:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 13:57:51 GMT
Expires: Sat, 04 Feb 2023 13:57:50 GMT
Etag: "97516097daa4325cf13da1afbc3a5c4dd9f5c2bc"
Cache-Control: max-age=575280,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790cff58bac2b50f-OSL
sync.technoratimedia.com/services?srv=cs&pid=70&uid=1674943189424-967135221947-001140-000-009025&cb=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D3%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BUSER_ID%5D
204 No Content 0 B URL HTTP/2 sync.technoratimedia.com/services?srv=cs&pid=70&uid=1674943189424-967135221947-001140-000-009025&cb=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D3%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BUSER_ID%5D
IP
ASN #31898 ORACLE-BMC-31898
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /services?srv=cs&pid=70&uid=1674943189424-967135221947-001140-000-009025&cb=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D3%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BUSER_ID%5D HTTP/1.1
Host: sync.technoratimedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 21:59:49 GMT
set-cookie: tads_uid=GDPR; Max-Age=157680000; Expires=Thu, 27 Jan 2028 21:59:49 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None
access-control-allow-origin: https://www.ducumon.me/
access-control-allow-credentials: true
access-control-allow-methods: POST,GET,HEAD,OPTIONS
x-varnish: 299109195
age: 0
via: 1.1 varnish
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 11a82e7334fd42664eb675945fb7b574
04c027cf71bafe1beb8ee669e7fe0a82be56321c
bf831d5d9322783c16726257f62e535a5342e1e28a9a1968729873e0c1f1aa3c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127445
Date: Sat, 28 Jan 2023 21:59:49 GMT
Etag: "63d4e004-1d7"
Expires: Mon, 30 Jan 2023 09:23:54 GMT
Last-Modified: Sat, 28 Jan 2023 08:42:44 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kpeB13MbbLIjpzTUm7PgIyGqnk_korDp1brdsl_xN7n-sJqRXjUdNA==
Age: 2470
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 11a82e7334fd42664eb675945fb7b574
04c027cf71bafe1beb8ee669e7fe0a82be56321c
bf831d5d9322783c16726257f62e535a5342e1e28a9a1968729873e0c1f1aa3c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 21:59:49 GMT
Last-Modified: Sat, 28 Jan 2023 21:19:15 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O-rQYh2PWlliBHlrOiPhJ02IpLNgrF5jWTRMsN7POnHWseFGvp6vjg==
Age: 2434
c.amazon-adsystem.com/aax2/apstag.js
200 OK 113 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
Size 113 kB (112664 bytes)
Hash b4f43296943b1b7e78dde576fe2b6754
904067647b9997d031dadd0e10493f6e9bc8af44
6622acd48196916bff85f6da285ae33d5ae8ec996deb2e5e15e7a0327068980a
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 28 Jan 2023 21:24:18 GMT
last-modified: Wed, 25 Jan 2023 21:28:25 GMT
etag: W/"8a6d0f2d51de2b80e524e04684f71215"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 75a13c74495137fb5435dc4030981df6.cloudfront.net (CloudFront), 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: _5WLwnzK1v8lNkyiyJEvQG-NDnNB2ObOvGNGoLzQXb3F8h7yXfcVhg==
age: 2132
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 267956
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 12:51:13 GMT
expires: Sat, 27 Jan 2024 12:51:13 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
age: 119317
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cs.admanmedia.com/.gif?gdpr=1&gdpr_consent=&us_privacy=1---&coppa=0&puid=1674943189424-967135221947-001140-000-009025&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D607eaa2728f57c570863c77a%26biddername%3D29%26
204 No Content 0 B URL HTTP/1.1 cs.admanmedia.com/.gif?gdpr=1&gdpr_consent=&us_privacy=1---&coppa=0&puid=1674943189424-967135221947-001140-000-009025&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D607eaa2728f57c570863c77a%26biddername%3D29%26
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.gif?gdpr=1&gdpr_consent=&us_privacy=1---&coppa=0&puid=1674943189424-967135221947-001140-000-009025&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D607eaa2728f57c570863c77a%26biddername%3D29%26 HTTP/1.1
Host: cs.admanmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 28 Jan 2023 21:59:50 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: DENY
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6222
Cache-Control: max-age=153520
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:50 GMT
Etag: "63d53738-1d7"
Expires: Mon, 30 Jan 2023 16:38:30 GMT
Last-Modified: Sat, 28 Jan 2023 14:54:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ssc-cms.33across.com/ps/?m=xch&rt=html&id=0015a00002egIVcAAM&us_privacy=1---&ru=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D104%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?m=xch&rt=html&id=0015a00002egIVcAAM&us_privacy=1---&ru=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D104%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?m=xch&rt=html&id=0015a00002egIVcAAM&us_privacy=1---&ru=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D104%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP010
date: Sat, 28 Jan 2023 21:59:49 GMT
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&pid=KLzA2Sn6FZsfL&cb=0&ws=1280x939&v=23.123.1617&t=8000&slots=%5B%7B%22id%22%3A%22aniview_aps_video%22%2C%22mt%22%3A%22v%22%7D%5D&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&pubid=842701b4-f689-4de3-9ff4-bc1999093771&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 23 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&pid=KLzA2Sn6FZsfL&cb=0&ws=1280x939&v=23.123.1617&t=8000&slots=%5B%7B%22id%22%3A%22aniview_aps_video%22%2C%22mt%22%3A%22v%22%7D%5D&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&pubid=842701b4-f689-4de3-9ff4-bc1999093771&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash eae5ee6c7e3134a287aa23fcd63d64f0
3b17dc8eb29b01bd80c12c7d64159d0434edfdac
745a085b52b8371ec6705413fca70a28c6d8bff0db480e6b124bd08c54e95ef8
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&pid=KLzA2Sn6FZsfL&cb=0&ws=1280x939&v=23.123.1617&t=8000&slots=%5B%7B%22id%22%3A%22aniview_aps_video%22%2C%22mt%22%3A%22v%22%7D%5D&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&pubid=842701b4-f689-4de3-9ff4-bc1999093771&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 23
server: Server
date: Sat, 28 Jan 2023 21:59:50 GMT
x-amz-rid: GMRCZ5M93AK90KP223CM
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D4CAKVZIBZ9p34EW9doqI08vi2DXvL9yPI_iPcGAjG0ejmMZaldF2g==
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943193984&asid=62261fa4bdef751ca3598516%2C60db3483d9c196618232e9f7%2C6087c691d4b94d1a955b0486%2C6249b2cda66dfc02c116e885&ofpr=%2C0.81%2C%2C1.35&fpo=%2C%2C%2C&ri=1%2C1%2C1%2C1
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943193984&asid=62261fa4bdef751ca3598516%2C60db3483d9c196618232e9f7%2C6087c691d4b94d1a955b0486%2C6249b2cda66dfc02c116e885&ofpr=%2C0.81%2C%2C1.35&fpo=%2C%2C%2C&ri=1%2C1%2C1%2C1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943193984&asid=62261fa4bdef751ca3598516%2C60db3483d9c196618232e9f7%2C6087c691d4b94d1a955b0486%2C6249b2cda66dfc02c116e885&ofpr=%2C0.81%2C%2C1.35&fpo=%2C%2C%2C&ri=1%2C1%2C1%2C1 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
204 No Content 0 B URL HTTP/2 tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rmp/217227/0/mvo?z=1r&hbv=7.12,2.1 HTTP/1.1
Host: tag.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 842
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:50 GMT
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress_child/style.css?ver=1669465270
301 Moved Permanently 4.1 kB URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress_child/style.css?ver=1669465270
IP
Hash 3780afe5f76a7bb068638798144ac025
3576a513d20c9842073bcc37fb0628e7f632b827
776e45a3a0c5aa98b283b5ab97aebbc83c8427b860202f692e3843a070daa61c
GET /wp-content/cache/min/1/wp-content/themes/generatepress_child/style.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress_child/style.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hl6JQWMVlEEBPbjrb3UY5WWe5T2JB8w7%2F8NsruKdiozF04M9Utgc6s8n3y%2BFRC3zPJfLpGIcwr%2B4qiYaznhPHl4SxjvMsrP6ZqvVwHmmLVrC2wPPxyoVN8It6vs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff399e85b807-RIX
server: fbs
set-cookie: SPSI=6c7ae12fdd1f43a846028d1bc04d1c22; path=/; HttpOnly; SameSite=Lax;
SPSE=RZzOzgeGkNjkNCD1ZEkT1cfIAc+InJdr555kzlk+A9m9SkKew8A+uFurtTEEEbXQ2dvT/85/RXTwFRF/38Ebig==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds238.sk1.sc,1674943184.cdn2-redis02-arn1.stackpath.systems.-.wx,1674943184.cds238.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 492adde21eba0fa897a07342bbca8d6c
3fd300d75e3f7ec403d3e2ba7e1bb7681f6d0a9e
5a3bd926b13644bce35b2ede0e182892e8e8df302133cb5b1e23b1f911bffc14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5396
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:50 GMT
Last-Modified: Sat, 28 Jan 2023 20:29:54 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
vuukle-d.openx.net/v/1.0/avjp?ju=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=2806507a-1095-430e-a4c0-2df54b87cb73&nocache=1674943194314&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&openrtb=%7B%22imp%22%3A%5B%7B%22video%22%3A%7B%22w%22%3A400%2C%22h%22%3A225%2C%22mimes%22%3A%5B%22video%2Fx-ms-wmv%22%2C%22video%2Fmp4%22%2C%22application%2Fjavascript%22%5D%7D%7D%5D%7D&auid=544108798&vwd=400&vht=225&aumfs=150
200 OK 106 B URL HTTP/2 vuukle-d.openx.net/v/1.0/avjp?ju=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=2806507a-1095-430e-a4c0-2df54b87cb73&nocache=1674943194314&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&openrtb=%7B%22imp%22%3A%5B%7B%22video%22%3A%7B%22w%22%3A400%2C%22h%22%3A225%2C%22mimes%22%3A%5B%22video%2Fx-ms-wmv%22%2C%22video%2Fmp4%22%2C%22application%2Fjavascript%22%5D%7D%7D%5D%7D&auid=544108798&vwd=400&vht=225&aumfs=150
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9860a6ee7110f11359ac0d654709e6d2
0070498287670571999a3fe78431495347ed9a2c
730fa1f3e8b3c4a223c4e69f4a27e690a4552f96ab97dba05b943dff44967658
GET /v/1.0/avjp?ju=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=2806507a-1095-430e-a4c0-2df54b87cb73&nocache=1674943194314&schain=1.0%2C1!vuukle.com%2C4a47762d-888d-4589-a7a3-5c06f4587bf8%2C1%2C%2C%2C&openrtb=%7B%22imp%22%3A%5B%7B%22video%22%3A%7B%22w%22%3A400%2C%22h%22%3A225%2C%22mimes%22%3A%5B%22video%2Fx-ms-wmv%22%2C%22video%2Fmp4%22%2C%22application%2Fjavascript%22%5D%7D%7D%5D%7D&auid=544108798&vwd=400&vht=225&aumfs=150 HTTP/1.1
Host: vuukle-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sat, 28 Jan 2023 21:59:50 GMT
content-type: application/json
content-length: 106
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943193984&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95%2C60def86bc79f871ad54159b4%2C6225b958f84354110b74e3e9&ofpr=0.2%2C0.15%2C0.15%2C%2C&fpo=%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943193984&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95%2C60def86bc79f871ad54159b4%2C6225b958f84354110b74e3e9&ofpr=0.2%2C0.15%2C0.15%2C%2C&fpo=%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943193984&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95%2C60def86bc79f871ad54159b4%2C6225b958f84354110b74e3e9&ofpr=0.2%2C0.15%2C0.15%2C%2C&fpo=%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
200 OK 17 kB URL HTTP/2 secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (36525), with NEL line terminators
Hash 65875d9adc4599663a61e744c57d3e08
da7689e79bd92cd1c676badf0fb897f045d48653
830050c7e3b735c29efa65defb4de8dc42969a8cbb12e520479f9d067a90f4bf
GET /js/pubcid/latest/pubcid.min.js HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Thu, 13 Oct 2022 18:14:48 GMT
etag: "d4ed-5eaee7c12df48-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 17131
content-type: application/javascript
cache-control: max-age=900
expires: Sat, 28 Jan 2023 22:14:50 GMT
date: Sat, 28 Jan 2023 21:59:50 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e6d15c4de4c8ba1bd619812c40a1162e
ff9bfa25103d351dba69c29b5b56390c4a7e52ad
f6c9c5943fe0fb150ecd091234d49cc8ec55d212d62da617c9296bf008c96016
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117457
Date: Sat, 28 Jan 2023 21:59:50 GMT
Etag: "63d4abfb-1d7"
Expires: Mon, 30 Jan 2023 06:37:27 GMT
Last-Modified: Sat, 28 Jan 2023 05:00:43 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eeC74lKxikhOsytxP5Y91mKPJlgPW_vCqr1YQ4vpe-9e7G1-JtY_bQ==
Age: 5804
c2shb.pubgw.yahoo.com/admax/bid/partners/PBJS
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/admax/bid/partners/PBJS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /admax/bid/partners/PBJS HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://www.ducumon.me/
Origin: https://www.ducumon.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://www.ducumon.me
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6222
Cache-Control: max-age=153520
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 21:59:50 GMT
Etag: "63d53738-1d7"
Expires: Mon, 30 Jan 2023 16:38:30 GMT
Last-Modified: Sat, 28 Jan 2023 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 918
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
X-Firefox-Spdy: h2
servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=56&auid=1674943189424-967135221947-001140-000-009025&key=247464a8-bf58-4bad-b138-0db2e8fd383f&gdpr_consent=null&gdpr=1
200 OK 0 B URL HTTP/2 servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=56&auid=1674943189424-967135221947-001140-000-009025&key=247464a8-bf58-4bad-b138-0db2e8fd383f&gdpr_consent=null&gdpr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=56&auid=1674943189424-967135221947-001140-000-009025&key=247464a8-bf58-4bad-b138-0db2e8fd383f&gdpr_consent=null&gdpr=1 HTTP/1.1
Host: servs.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
X-Firefox-Spdy: h2
servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=200&auid=1674943189424-967135221947-001140-000-009025&key=OPTOUT
200 OK 3.6 kB URL HTTP/2 servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=200&auid=1674943189424-967135221947-001140-000-009025&key=OPTOUT
IP
File type gzip compressed data, max compression\012- data
Hash 94c1095dd1448ccc330bc17ff0f76bf0
faf40efee794ee2bee9bed2abd70af53bbab7824
8073e9753e1dac02169b9e45f2265f6541f72bdc6789d18df550ac04078ab8c6
GET /cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=200&auid=1674943189424-967135221947-001140-000-009025&key=OPTOUT HTTP/1.1
Host: servs.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
set-cookie: 2_C_200=OPTOUT; Path=/; Domain=vuukle.com; Expires=Sun, 29 Jan 2023 21:59:50 GMT; Secure; SameSite=None
2_C_200=OPTOUT; Path=/; Expires=Sun, 29 Jan 2023 21:59:50 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=10&auid=1674943189424-967135221947-001140-000-009025&key=TxKi482UcDl9&ev=1&us_privacy=1---&pid=562704
200 OK 0 B URL HTTP/2 servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=10&auid=1674943189424-967135221947-001140-000-009025&key=TxKi482UcDl9&ev=1&us_privacy=1---&pid=562704
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=10&auid=1674943189424-967135221947-001140-000-009025&key=TxKi482UcDl9&ev=1&us_privacy=1---&pid=562704 HTTP/1.1
Host: servs.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5c00a6b71849e1f63887d38333830003
274723ffd4a062e1997a213ceeeab8a56ac83141
5e15ea6950fd4aa51af37519ac391c2c95cfd74ded6ac6e35432ccf68c70cb23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 21:59:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 01:56:49 GMT
Expires: Sat, 04 Feb 2023 01:56:48 GMT
Etag: "274723ffd4a062e1997a213ceeeab8a56ac83141"
Cache-Control: max-age=532017,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790cff5bdf10b50f-OSL
x.bidswitch.net/sync?ssp=&user_id=1674943189424-967135221947-001140-000-009025&gdpr=1&gdpr_consent=&us_privacy=1---
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?ssp=&user_id=1674943189424-967135221947-001140-000-009025&gdpr=1&gdpr_consent=&us_privacy=1---
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?ssp=&user_id=1674943189424-967135221947-001140-000-009025&gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5c00a6b71849e1f63887d38333830003
274723ffd4a062e1997a213ceeeab8a56ac83141
5e15ea6950fd4aa51af37519ac391c2c95cfd74ded6ac6e35432ccf68c70cb23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 21:59:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 01:56:49 GMT
Expires: Sat, 04 Feb 2023 01:56:48 GMT
Etag: "274723ffd4a062e1997a213ceeeab8a56ac83141"
Cache-Control: max-age=532017,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790cff5bd9bbb512-OSL
c2shb.pubgw.yahoo.com/admax/bid/partners/PBJS
204 No Content 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/admax/bid/partners/PBJS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /admax/bid/partners/PBJS HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1054
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:50 GMT
server: ATS/9.1.10.25
access-control-allow-origin: https://www.ducumon.me
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1---
200 OK 43 B URL HTTP/2 x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1---
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1674943189424-967135221947-001140-000-009025%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2846)
Size 126 kB (126544 bytes)
Hash 08170b094847c66f3b89d5a577c739ea
ea3f55dae751aaa5fb5b0fd0d74354c26d76dccd
598ef4c4803f256ff79120afe545bc162d0d84bc1224acff09a1dcd2f0bd9b35
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 126544
date: Sat, 28 Jan 2023 21:59:50 GMT
expires: Sat, 28 Jan 2023 21:59:50 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Sat, 28 Jan 2023 21:59:51 GMT
expires: Sat, 28 Jan 2023 21:59:51 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=11511666569&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=11511666569&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.12.0&cb=11511666569&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 747
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.ducumon.me
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 938
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196497&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196497&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196497&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:52 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196498&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri=
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196498&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196498&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri= HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:52 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
204 No Content 0 B URL HTTP/2 tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rmp/217227/0/mvo?z=1r&hbv=7.12,2.1 HTTP/1.1
Host: tag.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 843
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=87446828427&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=87446828427&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.12.0&cb=87446828427&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 747
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.ducumon.me
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 939
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196643&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196643&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&nid=607eaa2728f57c570863c77a&ncid=60c0a82f6f57a64acb1d6317&e=request&cb=1674943196643&asid=6272683eceb7b338af4a0c88%2C6246de9d4bbf6922cb1d012a%2C60d20ec752aee44cc21d8d95&ofpr=0.2%2C0.15%2C0.15&fpo=%2C%2C&ri=%2C%2C HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:52 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196644&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri=
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196644&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.ducumon.me&rs=www.ducumon.me&sid=16674&t=1674943189&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=400&he=225&app=&AV_PUBLISHERID=607eaa2728f57c570863c77a&test=&d64=3e9b031acfbb2942dd9ac82292551f33&d63=3e9b031acfbb2942dd9ac82292551f33&aafaid=&proto=https&uid=1674943189424-967135221947-001140-000-009025&cha=0.05&stagid=60c0a88e7b21b51e39691b38&stplid=607fd3693ad8d148f72c16d6&d35=&d36=6.2.76&cb=62753656502&d39=&d65=&d66=&apppkg=&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=225&&copid=607eaa2728f57c570863c77a&nid=59c9148628a0612da3689288&cocid=60c0a82f6f57a64acb1d6317&ncid=6087e2a089db1d32452c2995&coasid=6087e2c4921bb844376efaf6&e=request&cb=1674943196644&asid=60db3483d9c196618232e9f7&ofpr=0.81&fpo=&ri= HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:52 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
204 No Content 0 B URL HTTP/2 tag.1rx.io/rmp/217227/0/mvo?z=1r&hbv=7.12,2.1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rmp/217227/0/mvo?z=1r&hbv=7.12,2.1 HTTP/1.1
Host: tag.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 841
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 21:59:52 GMT
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
www.ducumon.me/2021/10/ducumon-iku.html
200 OK 0 B URL HTTP/2 www.ducumon.me/2021/10/ducumon-iku.html
IP
GET /2021/10/ducumon-iku.html HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: text/html; charset=UTF-8
last-modified: Sat, 28 Jan 2023 14:55:46 GMT
cache-control: max-age=0
expires: Sat, 28 Jan 2023 21:59:44 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hO%2FaDWCJVMFbDFWsnlNzn%2FRHaX3CUcFaRvWu4lmsYmpv4wGSihg316VobIbhjaGjucsuyaoIm9Z4XmY0y0SujIVKxk7KskbqhuLbqlurMz862boq2XR8fdRlBXgja4WU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff367c5ab517-OSL
content-encoding: br
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D10%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%25%25VGUID%25%25
302 Found 0 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D10%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%25%25VGUID%25%25
IP
GET /bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D10%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%25%25VGUID%25%25 HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5ffd6ccc57-zz5br
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
set-cookie: ccpa=1---;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 27-Feb-2023 21:59:50 GMT;Max-Age=2592000;SameSite=None
V=TxKi482UcDl9;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 23-Jan-2024 21:59:50 GMT;Max-Age=31104000;SameSite=None
pb_rtb_ev=3-1img|8jz.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 28-Jan-2024 21:59:50 GMT;Max-Age=31536000;SameSite=None
INGRESSCOOKIE=fc4715f70af7c8b1; path=/; HttpOnly; Secure; SameSite=None
location: https://servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=10&auid=1674943189424-967135221947-001140-000-009025&key=TxKi482UcDl9&ev=1&us_privacy=1---&pid=562704
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js
IP
GET /wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:45 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/c6a38eabdeedb39f112541a9a1bb92ec.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZU1HQ9jR8y6UVdB1wl3vzIGBQvIB%2BzaL3fDgghKfH2ofg3%2FVgB6lny8Euc8i%2F8WT6VCmm531tCn5OWOZalWaEY%2BXabLI9KQPaNhqUDxGoVvTu1%2BDm7Pkf%2BMAFH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff3cdb1cb803-RIX
server: fbs
set-cookie: SPSI=11d8fdb24095484ee2bb2f828dd56005; path=/; HttpOnly; SameSite=Lax;
SPSE=kmdxv4ABzPwYVAc1pdYYadXQdwtnTGCKSD9JumoASqvdQy1IY+ZMB9Q6iUqkiDkyZQFtYa0qae8A64wSKnqKmA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943185.cds071.sk1.hn,1674943185.cds003.sk1.sc,1674943185.cdn2-redis01-arn1.stackpath.systems.-.wx,1674943185.cds003.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.ducumon.me%2F&domain=www.ducumon.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.ducumon.me
server-processing-duration-in-ticks: 1378679
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/09/cropped-ducumon2021-p2-32x32.png
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/09/cropped-ducumon2021-p2-32x32.png
IP
GET /wp-content/uploads/2021/09/cropped-ducumon2021-p2-32x32.png HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:45 GMT
accept-ranges: bytes
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/uploads/2021/09/cropped-ducumon2021-p2-32x32.png
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IwBO4YCAEP1NENl8Pm7lGu4SPx%2FtXjKGIS6962AFayQJaP8fX59D0dCtg9dUMcAk909oulwkEUXlEdBNgcbwoOsdm%2BwOERQ9niIakW%2FuzwCJxmoQ9XdXRuRKrQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff3f0f32b7b5-AMS
server: fbs
set-cookie: SPSI=4a19e5752de1156db80b8f3ab6303205; path=/; HttpOnly; SameSite=Lax;
SPSE=+3SGMJdiR2yU3xuJX1iPj+RYNM2lk4bXQsU0CcNuFl+sRuA96j9gFy9OrAmQj7iI2JIsqFznQx9KrMSYh9N/Lg==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943185.cds071.sk1.hn,1674943185.cds262.sk1.sc,1674943185.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1674943185.cds262.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.ducumon.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.ducumon.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/2021/10/ducumon-iku.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 11:05:52 GMT
etag: W/"63ce6a10-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pbd8DYAkZ6%2B0t77ctrFvIgxZkhEA60kRcpsRlJdAAHXv50dZWZJKxYfnBBDosRoxfRlIce9WEkbug4MoyIvlVDjkxx1T%2B2LFL4IRfUi6yK54Qb14gCy4CyuAXn%2FIM%2FVb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790cff386f27b517-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 30 Jan 2023 21:59:44 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open%20Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open%20Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&display=swap
IP
GET /css?family=Open%20Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 28 Jan 2023 21:59:44 GMT
date: Sat, 28 Jan 2023 21:59:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
intorterraon.com/5/5383485/?oo=1&aab=1
200 OK 0 B URL HTTP/2 intorterraon.com/5/5383485/?oo=1&aab=1
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /5/5383485/?oo=1&aab=1 HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: application/json
x-trace-id: 74286ac366afd601f4ecf1c49e268095
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=435804c6a7fd4d13969ce50aecf2fab5; expires=Sun, 28 Jan 2024 21:59:47 GMT; path=/; secure; SameSite=None
oaidts=1674943187; expires=Sun, 28 Jan 2024 21:59:47 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/G-qNJ9zDpVo
200 OK 0 B URL HTTP/2 www.youtube.com/embed/G-qNJ9zDpVo
IP
GET /embed/G-qNJ9zDpVo HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 28 Jan 2023 21:59:45 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=FWm9GG3MKR0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=Wa58XVsNS0A; Domain=.youtube.com; Expires=Thu, 27-Jul-2023 21:59:45 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TXpneU5qSXdNakkwTkRVeU16WTNNQT09ENG11p4GGNG11p4G; Domain=.youtube.com; Expires=Thu, 27-Jul-2023 21:59:45 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+249; expires=Mon, 27-Jan-2025 21:59:45 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Dec 2022 01:05:48 GMT
x-amz-version-id: 1R3b4YI9dI20q9Y7Gq1DHxVUnq3Fp2gn
server: AmazonS3
content-encoding: gzip
date: Sat, 28 Jan 2023 07:21:15 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u1ehbPlVrTGVY9QupD6AvV1F2XNCHfdUfNH3C4Z3_-OwR3pvYpnS3g==
age: 52714
X-Firefox-Spdy: h2
cdn.id5-sync.com/api/1.0/id5-api.js
200 OK 0 B URL HTTP/2 cdn.id5-sync.com/api/1.0/id5-api.js
IP
GET /api/1.0/id5-api.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:50 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: CO+cPK9MlXQ+Pp7rzr8UBe9jXf3QVRyCEIXUUj0WHfDV3zQVrjcz3bOmEOU9iBqkaS9ucJx5v/0=
x-amz-request-id: H722FXZ7MH4EZWKX
last-modified: Wed, 18 Jan 2023 10:47:57 GMT
etag: W/"4d61440f9cbdbb9b0b5a43273c7c3caf"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 2999
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 790cff59ed5cb4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
IP
GET /wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/cache/min/1/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=1669465270
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C8U38tD9oKibexB3BzUMsjvwAiO9cNlgZdEkg4w3aQ54dv4ZmfvCly6E8zVoEZgpk4YHROEGZeDdCphS4zhq8aF4IM%2FzZDqQrNHXOg8EfxVtx2MwJ4F4fIc606E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff399e81b807-RIX
server: fbs
set-cookie: SPSI=812f53274440397f545830cc1d92b8af; path=/; HttpOnly; SameSite=Lax;
SPSE=lrJQp5BBLtieUVMQ1DeSR4SqNE4MxcyzHdsPNbzAgWrjFFwJs5PMIeEB2WgfbnTTrSRNd/hPl3Ukipv2U0gm7g==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds238.sk1.sc,1674943184.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1674943184.cds238.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.ducumon.me/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1674936000
200 OK 0 B URL HTTP/2 www.ducumon.me/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1674936000
IP
GET /cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1674936000 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: application/javascript; charset=UTF-8
x-control-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=23bURVv73nsScRleTBjpOeX5ogRId5%2FaonsDl05%2FDu9957Hxl2L6UdBtI1UU7y7P66VaVK%2F1Nqqfvh9sIeslfXJja05PH56hfinsjRt9uD%2BwjKaUcF4Feuo3f%2BEF%2BGvE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff49cfc9b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
intorterraon.com/?rb=7vKDWAAtjZU8xYt5OfWb2t1SVh59a1sdKQU79V6vIhAg6zDC72l0Zpr9EKrU_L3ZdF8ScMyvIFJODERbJXyybRkOCh0VWKKJv0b6M73Q1srLYQPEyVfttyJXcXUKLssw_ZKJojBKfJVJlCwRXMN0ajfPGhbc6iRCRP2eQWXDJzEPdAgGDfzhVlk2y7uV7pwcXaEjZJJbgsKvlGVlWPoqHbn2IGH27WwBYwEm0i9utjQ%3D&request_ab2=0&zoneid=5383485&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=9e1cc81f-ec65-4a6b-8f31-f036b79445da&userId=435804c6a7fd4d13969ce50aecf2fab5&m=link
200 OK 0 B URL HTTP/2 intorterraon.com/?rb=7vKDWAAtjZU8xYt5OfWb2t1SVh59a1sdKQU79V6vIhAg6zDC72l0Zpr9EKrU_L3ZdF8ScMyvIFJODERbJXyybRkOCh0VWKKJv0b6M73Q1srLYQPEyVfttyJXcXUKLssw_ZKJojBKfJVJlCwRXMN0ajfPGhbc6iRCRP2eQWXDJzEPdAgGDfzhVlk2y7uV7pwcXaEjZJJbgsKvlGVlWPoqHbn2IGH27WwBYwEm0i9utjQ%3D&request_ab2=0&zoneid=5383485&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=9e1cc81f-ec65-4a6b-8f31-f036b79445da&userId=435804c6a7fd4d13969ce50aecf2fab5&m=link
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=7vKDWAAtjZU8xYt5OfWb2t1SVh59a1sdKQU79V6vIhAg6zDC72l0Zpr9EKrU_L3ZdF8ScMyvIFJODERbJXyybRkOCh0VWKKJv0b6M73Q1srLYQPEyVfttyJXcXUKLssw_ZKJojBKfJVJlCwRXMN0ajfPGhbc6iRCRP2eQWXDJzEPdAgGDfzhVlk2y7uV7pwcXaEjZJJbgsKvlGVlWPoqHbn2IGH27WwBYwEm0i9utjQ%3D&request_ab2=0&zoneid=5383485&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Fwww.ducumon.me%2F2021%2F10%2Fducumon-iku.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=9e1cc81f-ec65-4a6b-8f31-f036b79445da&userId=435804c6a7fd4d13969ce50aecf2fab5&m=link HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Origin: https://www.ducumon.me
Connection: keep-alive
Cookie: OAID=435804c6a7fd4d13969ce50aecf2fab5; oaidts=1674943187
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 21:59:49 GMT
content-type: application/json
x-trace-id: 8560662ddd4c3c73b2b170b5047ae3a7
access-control-allow-origin: https://www.ducumon.me
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=435804c6a7fd4d13969ce50aecf2fab5; expires=Sun, 28 Jan 2024 21:59:49 GMT; path=/; secure; SameSite=None
oaidts=1674943189; expires=Sun, 28 Jan 2024 21:59:49 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 04 Feb 2023 21:59:49 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D200%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BRX_UUID%5D
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D200%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BRX_UUID%5D
IP
GET /usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fservs.vuukle.com%2Fcookiesyncendpoint%3Fpid%3D59c9148628a0612da3689288%26biddername%3D200%26auid%3D1674943189424-967135221947-001140-000-009025%26key%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 28 Jan 2023 21:59:49 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://servs.vuukle.com/cookiesyncendpoint?pid=59c9148628a0612da3689288&biddername=200&auid=1674943189424-967135221947-001140-000-009025&key=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/10/DucumonIku-min.jpg
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/10/DucumonIku-min.jpg
IP
GET /wp-content/uploads/2021/10/DucumonIku-min.jpg HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/uploads/2021/10/DucumonIku-min.jpg
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zj8I8ChE0vPBJRQnANNysSkCAE7vaDVxKinurIM3%2BZVL46kTe07uciSwg13I14c5YLJshFbho1Ui%2Btrfr%2BgAxFo1N0%2BTBf1JXU2zO92leNyRHXHv4eSbbv31xvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39f8f40bce-AMS
server: fbs
set-cookie: SPSI=72f62e2c90810587a64142c256a20734; path=/; HttpOnly; SameSite=Lax;
SPSE=KMRoIyo47SnPB1izJhafANck5tcLUWL0wnImpRLl7C++THRP2K/MU+t+ZowM1CJl/0KLZtBbddfWww22gU1JiA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds212.sk1.sc,1674943184.cdn2-redis01-arn1.stackpath.systems.-.wx,1674943184.cds212.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/10/DucumonIkuC-min.jpg
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/10/DucumonIkuC-min.jpg
IP
GET /wp-content/uploads/2021/10/DucumonIkuC-min.jpg HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/uploads/2021/10/DucumonIkuC-min.jpg
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bgjv1ce3pnKCW4jtyVJ7zFbTcK9l5N7CU5VGZMmc21B%2FgWz%2BzItjqs4ElCrjuI1fj4CcnVbN7aKyY3SURNjvwsdjMuHmYIjnnCAYbSc9G94q2DNQ3PJD6feoCRs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39edd7b994-AMS
server: fbs
set-cookie: SPSI=1caf8b1689247b84b2cef0bf48910b85; path=/; HttpOnly; SameSite=Lax;
SPSE=7B09fGwiuK7Oew+i8uP1PIJt9lX+Vc7+hAIYDyRyQj0JscjNgZfpVFBrpEO33QbcW+5alS3zEii3mHhLSxHIuA==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds203.sk1.sc,1674943184.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1674943184.cds203.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4
IP
GET /wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4 HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GWiGCWaKUEEkj8q%2FePim5oIEQMwRD2EnzSgjQpkQD6jt6gvs%2BqBpc17sbtwftVarML48Sl422qsr%2FjKnAWBzWw3P3anovwj%2F2pIdP472%2B4GQBUygYMG1uHpLdLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff39deb20a6f-AMS
server: fbs
set-cookie: SPSI=aea90d3a29f4d702776ef529176ede03; path=/; HttpOnly; SameSite=Lax;
SPSE=KMRoIyo47SnPB1izJhafAIeFNNhK7cmrFTHnkS+YLjPSiNpROz8b03xZdYWcBinTq96kyD+CDYWdTAVe/3VZag==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943184.cds071.sk1.hn,1674943184.cds240.sk1.sc,1674943184.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1674943184.cds240.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.ducumon.me/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4
200 OK 0 B URL HTTP/2 www.ducumon.me/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4
IP
GET /wp-content/themes/generatepress/assets/css/all.min.css?ver=3.2.4 HTTP/1.1
Host: www.ducumon.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ducumon.me/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:44 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 23 Nov 2022 11:06:13 GMT
cache-control: public, max-age=31536000
expires: Mon, 27 Nov 2023 10:40:50 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5397534
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=srHLlM1ncj4BkROYHJVKuBSohyjIEsk7bF9ajntXiiRlembSXCo9FoVFNIU%2FlHgsI6FTrDLdOpB0uZ6tcZ%2BUsGG5O%2BZ7HJsktnRBKACeSvtQbiD7FnoUQrlxdCLZjZEa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790cff3a2955b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png
301 Moved Permanently 0 B URL HTTP/2 z9v5j9a5.stackpathcdn.com/wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png
IP
GET /wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png HTTP/1.1
Host: z9v5j9a5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 21:59:45 GMT
accept-ranges: bytes
cache-control: max-age=3600
location: https://www.ducumon.me/wp-content/uploads/2021/09/cropped-ducumon2021-p2-192x192.png
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=su5f%2FAeLjBY5bTIcPRihRyMcEyEhwxQ6Dgf8JQDmYHnxqtoR4GguvYb3VOxCgiKy4is%2B464tmkvZHFmSKvLTVYGaMa2GIIuJQFAntQaV1bPDehl43nFclS%2BmSgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-ray: 790cff3ef8a50e50-AMS
server: fbs
set-cookie: SPSI=5ab66250edc2755672ac2662622033c0; path=/; HttpOnly; SameSite=Lax;
SPSE=kmdxv4ABzPwYVAc1pdYYafH1yf9LGl3U2eeOWLfbYg+qeyU0HD00oJua2i1JCd4w1j0SnV/I8dCLyX8AYOspGQ==; path=/; HttpOnly; SameSite=Lax;
x-hw: 1674943185.cds071.sk1.hn,1674943185.cds256.sk1.sc,1674943185.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1674943185.cds256.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
publish.vuukle.com/bq-publish?callback=&{%22action%22:%22view_page%22,%22hashed_email%22:%22$106aa6-311d-4ec3-bcf6-3198cbbce72d%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%22e11c5cb8-76b5-4a85-ba3b-0c09ad0a987d%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741
200 OK 0 B URL HTTP/2 publish.vuukle.com/bq-publish?callback=&{%22action%22:%22view_page%22,%22hashed_email%22:%22$106aa6-311d-4ec3-bcf6-3198cbbce72d%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%22e11c5cb8-76b5-4a85-ba3b-0c09ad0a987d%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741
IP
GET /bq-publish?callback=&{%22action%22:%22view_page%22,%22hashed_email%22:%22$106aa6-311d-4ec3-bcf6-3198cbbce72d%22,%22hostname%22:%224a47762d-888d-4589-a7a3-5c06f4587bf8%22,%22pubdomain%22:%22ducumon.me%22,%22refDomain%22:%22%22,%22sessionId%22:%22e11c5cb8-76b5-4a85-ba3b-0c09ad0a987d%22,%22version%22:%224.20%22,%22articleImg%22:%22%22,%22articleTitle%22:%22Ducumon%20Iku%22,%22article_id%22:%2210017%22,%22hashed_article_url%22:%22ducumon.me%2F2021%2F10%2Fducumon-iku.html%22,%22referrer%22:%22Ducumon%22,%22tags%22:%22%22,%22browser%22:%22Firefox%22,%22device%22:%22Desktop%22,%22os%22:%22Windows%22}&_=1489139930741 HTTP/1.1
Host: publish.vuukle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ducumon.me
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 21:59:47 GMT
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.ducumon.me
x-xss-protection: 1
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 790cff4919731bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.unblockia.com/h.js
200 OK 0 B IP
GET /h.js HTTP/1.1
Host: cdn.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ducumon.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 26 Jan 2023 11:26:31 GMT
x-amz-meta-codebuild-content-sha256: 2132d7e58c7c36ee71eca9cd6aabfcfa3f24dfa6e16d5257110c4b567c335eef
x-amz-version-id: sOaeUhiHU1Zn8Vjl9BBcjj2clPo2dTso
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:987257285531:build/unblockia-loader-codebuild-project:80710608-88b1-4aba-a9dd-473ce4162976
x-amz-meta-codebuild-content-md5: 94f9fd57a58c794e2ce7ef76a25de736
server: AmazonS3
content-encoding: br
date: Fri, 27 Jan 2023 22:32:16 GMT
etag: W/"04e0f1cdaa00375a296ef7771d43fb16"
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iZQcVrlRLVyg5BnfbRpA9nxuECpSscSm-rdKtgnbyuot6G_yg7LTkw==
age: 84452
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
172.67.73.58
80.77.87.161
23.46.116.133
3.120.17.109
72.251.249.9
178.250.0.157
82.145.213.8
104.22.53.86
188.114.97.1