Overview

URLgo.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s1=4p2zKZt7UTfcJExdqr128Y&s2=1280&s7=831&s8=game-the.last.spell-(63177).part1.rar
IP 50.19.220.156 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 15:57:56 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
go.greenlinknow.com (1) 0 2021-06-13T15:23:05Z 2023-03-26T13:49:36Z 611 791 100.25.120.147
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 52.88.143.102
ocsp.e2m02.amazontrust.com (1) 0 2022-12-07T11:11:00Z 2023-03-29T09:11:46Z 350 753 54.230.80.227
js-agent.newrelic.com (10) 378 2018-06-22T06:15:37Z 2023-03-29T05:14:31Z 4076 33477 151.101.130.137
event.secureanalytic.com (4) 30491 2021-07-14T06:47:30Z 2023-03-29T15:01:28Z 2006 5006 172.64.104.16
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2374 35.241.9.150
go.bluelinknow.com (1) 0 2021-07-12T12:28:12Z 2023-03-29T07:04:04Z 456 621 50.19.220.156
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5893 34.160.144.191
ocsp.pki.goog (4) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 1372 2798 142.250.74.131
forever-stream.com (1) 0 2023-02-09T14:27:20Z 2023-03-26T21:57:43Z 598 72606 172.67.182.136
static.hotjar.com (1) 641 2014-11-01T06:14:27Z 2023-03-29T05:25:56Z 380 73325 54.230.111.39
cdn.content-loads.com (21) 0 2022-06-05T00:19:03Z 2023-03-27T09:03:52Z 9825 2144251 104.26.8.128
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-29T10:13:53Z 409 18690 172.217.21.170
bam.eu01.nr-data.net (2) 9782 2018-05-17T14:36:00Z 2023-03-28T18:38:06Z 1580 1641 185.221.85.3
secureanalytic.com (1) 13422 2015-12-31T08:20:46Z 2023-03-28T18:24:35Z 410 1428 172.64.105.16
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 3042 7978 95.101.11.115
ocsp.r2m01.amazontrust.com (1) 0 2022-10-12T22:43:53Z 2023-03-29T09:11:41Z 350 1006 54.230.80.227
www.google-analytics.com (1) 40 2012-10-03T03:04:21Z 2023-03-29T06:01:47Z 375 20615 142.250.74.174
vc.hotjar.io (1) 2334 2019-04-16T12:33:25Z 2023-03-29T09:20:58Z 428 368 54.230.111.70
in.hotjar.com (1) 1746 2018-10-22T19:15:59Z 2023-03-29T05:25:59Z 490 2606 54.77.128.32
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3260 48551 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-03-23 medium forever-stream.com Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 50.19.220.156
Date UQ / IDS / BL URL IP
2023-03-23 15:57:56 UTC 0 - 0 - 1 go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s (...) 50.19.220.156


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-06-02 04:49:53 UTC 0 - 1 - 0 magazinemembership.com/wp-admin/images/web/BO (...) 52.86.6.113
2023-06-02 04:48:10 UTC 0 - 3 - 0 gms.vct.s3.amazonaws.com/service64/gmpmSrv.exe 3.5.7.133
2023-06-02 04:45:53 UTC 0 - 2 - 0 magazinemembership.com/wp-admin/images/web/BO (...) 52.86.6.113
2023-06-02 04:40:50 UTC 0 - 19 - 0 mammoth-sandy-durian.glitch.me/ 52.5.48.123
2023-06-02 04:21:33 UTC 2 - 0 - 0 www.thebluebook.com/wsnsa.dll/WService=wsbrk1 (...) 100.25.195.237


Last 5 reports on domain: bluelinknow.com
Date UQ / IDS / BL URL IP
2023-05-28 14:20:42 UTC 0 - 0 - 3 go.bluelinknow.com/t/clk?id=PXHPa8afpdf6eaUZ& (...) 3.209.163.71
2023-05-28 14:20:39 UTC 0 - 0 - 3 go.bluelinknow.com/t/clk?id=rxHwLpLtYnu0M6hq& (...) 52.3.35.175
2023-05-28 14:20:38 UTC 0 - 0 - 3 go.bluelinknow.com/t/clk?id=6XHa797TmwfYQRhr& (...) 52.3.35.175
2023-05-28 02:32:41 UTC 0 - 0 - 1 go.bluelinknow.com/t/clk?id=l7HRkLkUB4HXBdC0& (...) 52.3.35.175
2023-05-27 13:09:09 UTC 0 - 0 - 1 go.bluelinknow.com/t/clk?id=l7HRkLkUB4HXBdC0& (...) 52.3.35.175


Last 4 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-22 06:43:22 UTC 0 - 4 - 1 go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s (...) 100.25.120.147
2023-03-07 15:04:47 UTC 0 - 0 - 1 go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s (...) 3.218.6.70
2023-01-21 06:36:57 UTC 0 - 0 - 2 download-beststream.live/en_us/streaming-club (...) 104.21.38.47
2023-03-25 19:11:16 UTC 0 - 0 - 1 go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s (...) 54.88.247.14

JavaScript

Executed Scripts (26)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (72)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11545
Expires: Thu, 23 Mar 2023 19:10:10 GMT
Date: Thu, 23 Mar 2023 15:57:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11936
Expires: Thu, 23 Mar 2023 19:16:41 GMT
Date: Thu, 23 Mar 2023 15:57:45 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 15:27:34 GMT
age: 1811
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10784
Expires: Thu, 23 Mar 2023 18:57:29 GMT
Date: Thu, 23 Mar 2023 15:57:45 GMT
Connection: keep-alive

                                        
                                            GET /t/clk?id=3xHayepcEVcRKc2&s1=4p2zKZt7UTfcJExdqr128Y&s2=1280&s7=831&s8=game-the.last.spell-(63177).part1.rar HTTP/1.1 
Host: go.bluelinknow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             50.19.220.156
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                            
Date: Thu, 23 Mar 2023 15:57:45 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx/1.14.2
Location: https://go.greenlinknow.com/t/clk?id=bLH31paiwvfLruQ&s1=4p2zKZt7UTfcJExdqr128Y&s2=1280&s7=831&s8=game-the.last.spell-(63177).part1.rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02
Cache-Control: no-transform
X-Frame-Options: SAMEORIGIN
Vary: Cookie, Origin
Set-Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1pfNJx:jWYYL9sGTnaLUnf8ZB4fPqmjCug"; expires=Sat, 22 Apr 2023 16:57:45 GMT; Max-Age=2595600; Path=/; SameSite=None; Secure

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: u6FWyUYWz85shmhBk6oQLfg/M8zm2eWyQ5BVJvcgAOGWtiFE4sTXyc/SzCHVE/Xz/QZKY3svqXntp4mnVi2roA==
x-amz-request-id: RZRPV60T6ZK9KDRY
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 15:54:06 GMT
age: 219
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 15:57:45 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 15:17:23 GMT
age: 2422
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=146626
Date: Thu, 23 Mar 2023 15:57:45 GMT
Etag: "641bf908-1d7"
Expires: Sat, 25 Mar 2023 08:41:31 GMT
Last-Modified: Thu, 23 Mar 2023 07:00:24 GMT
Server: ECAcc (nya/78E9)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NpTDylV04H4nrVfQVZdoKhaR401Nisvs8KZe4Hd9AfGq7FooJraE7Q==
Age: 6067

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12720
Expires: Thu, 23 Mar 2023 19:29:45 GMT
Date: Thu, 23 Mar 2023 15:57:45 GMT
Connection: keep-alive

                                        
                                            GET /t/clk?id=bLH31paiwvfLruQ&s1=4p2zKZt7UTfcJExdqr128Y&s2=1280&s7=831&s8=game-the.last.spell-(63177).part1.rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02 HTTP/1.1 
Host: go.greenlinknow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             100.25.120.147
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                            
date: Thu, 23 Mar 2023 15:57:45 GMT
content-length: 0
location: https://forever-stream.com/nb_no/streaming-club?subid=5c86b149-578d-4232-9e4b-45b6872a203d&networkid=200274&publisher=1280&isNewTr=1&stream=game-the.last.spell-(63177).part1.rar
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Cookie, Origin
set-cookie: uip="[\"DdToSKROrS\"\054 {\"b1z\": \"AnJrYEv\"}]:1pfNJx:Le2bH8gIZiX9D2ZJ4SHBUiWsO5o"; expires=Sat, 22 Apr 2023 15:57:45 GMT; Max-Age=2592000; Path=/ ydt_a31a0322edef4efaa328c3e667d70925="[\"5c86b149-578d-4232-9e4b-45b6872a203d\"]:1pfNJx:b0dSGCmC33nG8hBWNIh1cOMcMMc"; expires=Sat, 22 Apr 2023 16:57:45 GMT; Max-Age=2595600; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6a5pesOW1dqdUWS13dV1Iw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.88.143.102
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KuN1il1fNLTqTQhoPVvRznRb1kA=

                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-success-img.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 5532
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
etag: "641afc9c-159c"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5830
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7g8hw1cgM%2FDB925Wx2Lcp4h3gU62FjxnPdFxi8amf7NM5tomxwtqR0%2F74MsqRmsjztW7zeN1RAJ1HNqMN%2BXMf0jq2ov%2FSe5lICZX%2BWrNEbYAsFKM1vpBTvRPe1oBhWG98vP3FqTJPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb750afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data
Size:   5532
Md5:    d4e9852797d8344d7cf548f0e995b3f9
Sha1:   24d735802263b5a4e213808f063768c2cab64526
Sha256: df5b88dcdde24064831192cf91da1261929edd43ccd2109c9f48a657b6347dca
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/email-existed-img.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 6014
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
etag: "641afc9c-177e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5829
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZRvA%2B05O1TKMmKS2C%2BR%2BeJk%2BRd7vYzOfV1v7caufNpQoQMf1lWFYW6XwiKEgC9nQAqgk%2BLEw%2B9%2BWeRD%2B4zvaXHN%2BPHIIg77YGO39Q3Mjw%2BQyvlRNfLkY3WECel0ZXECEbdgnjfYwJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb7c0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data
Size:   6014
Md5:    51655898e6c2520a08a65e0eef729ea5
Sha1:   d05f1470dca9a5ef27bfa1f78db4b8ec569d9047
Sha256: 8f1ad81b346d3ee6d36229c7542e9bbd051e58de0c434b7f97cd01bddcd9d678
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:57:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-declined-img.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 5580
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
etag: "641afc9c-15cc"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5830
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vLCJtRL6boWf3J5%2B%2BLzl%2FRzVl9WOErwBtQ8mnE%2BDuvx1pKgEXBHa%2BsCOlQnflY4S8ctgZqeK%2FYcNSrt2vMSNM75W347jXqd7kIDrlG335apFSOeeqBdLHtxTzhUQqKOdoVS8WEl8nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb7b0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data
Size:   5580
Md5:    78b2d1575168ed90d031a3dca86563ca
Sha1:   b1b24b07ae83ec93b2e0f224973053abaa8c7acc
Sha256: a8b45a0089c9ee6f6e4afd93b2468f0e2b6e970d02745747ebc93440e6baacc1
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/b3789fe0d07477dd3f93661429202d5f.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 2274
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-8e2"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cNbWhEGp9B4ksOyPiiKa0W%2FwhJy%2B3NXognlywLHqrxkHYvwj6665sq8eb3tZ2FLGII8TpncKamXwmqg0m%2FmXx9GTtJAtg5QeO%2FBwZEwN5xrS%2BwceMubSxTOzfVMpDQlB9yCJZZC%2FsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb720afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   2274
Md5:    b3789fe0d07477dd3f93661429202d5f
Sha1:   73c0edfdb5043be37f7833a14c3665b72aaa6e19
Sha256: 1c3213862fcbb73db74dd52f6802d4c8b0cb00062bc6169cc93c110720821f0b
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/12e2bcc7cae9c2211a695df886e28e9b.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 4792
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-12b8"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=odzJRgFDmFAnROtlPqBPWlA93amlzLILcqL7AWIkUdAb1wYZWPvebzPoIEZdzPjkUljIvV6%2FZ8hSjPIsR804hJleD%2BSZGvL4FoUHNzy1ugJq6SLe0fiPhFhCugwdAYmmf4lpiNQ7Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb6c0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced\012- data
Size:   4792
Md5:    12e2bcc7cae9c2211a695df886e28e9b
Sha1:   0e31a94632d7efa8ca00b3d84b90f3e61fcc7322
Sha256: cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/1f0552bb42b6e8a10f842f4c0226c4ad.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 560
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-230"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0Sd5LbYe4Gh6guD0QnHzyI%2B1qjry84xHt7L%2FsbQ7iqp0%2Focsv4JbJzbkHkESUMPPcHNpo%2Fy1ucXQoch9uGlhy%2FGdGkb2UG%2B1uMNGhuPY%2BVDj6Yr3HWACDrtEn%2BS%2FF3LMzIWOPTbwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb710afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 72 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   560
Md5:    1f0552bb42b6e8a10f842f4c0226c4ad
Sha1:   ff31aa175ee8740b152c0b5f0f3ecf379efd9fd6
Sha256: 93ee307825a50567726e8fb9464052deb229f7b12b8797301fc1eda3d4d51f1b
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/b6118813f36801c38f9ed661fd30ac79.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 286
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-11e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8BZSlSBN2eq8qnP%2FUAV152iX6gobW8HFo4Ff%2BzukS4s8YEZWgmL9pAUpLKgTG8%2BeezmMEwmQL0AtmQQnUN4ekn3tdhTZ8UbFswRwGc9QiBli8bZUBtYtsLJti5KkbGw%2BdTSd1j3qNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb700afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   286
Md5:    b6118813f36801c38f9ed661fd30ac79
Sha1:   0d1b9dc1d1ec01ee2b343398f476b983305847b2
Sha256: 7213e4af4a95530c772b757e7d42a007e5452dfe3017581328489a170d14d1f8
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/f5126485b8c58b637b6d45a27ba9b778.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 1381
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-565"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zovpFPERrCO0PgfFgMFf%2FEmBMyvM7w9Q8zNaOJ1XLWFY10JG6pUYLggVkktWL1soalmToDJUXrj2qTBdmBNlF2%2BGq5mvaXUu%2ByLxwH64XVx6W2Or2t9zr73OJS3V9hgaXCZSGzhKiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb6d0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 71 x 58, 8-bit/color RGBA, non-interlaced\012- data
Size:   1381
Md5:    f5126485b8c58b637b6d45a27ba9b778
Sha1:   af7dfa4ba95e7fc20176765845e7d07ea676a7ba
Sha256: dd90005ded6279e7929a5d1efd9f36d5a46b926f6be6651f5ed22c1af29d45f0
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/04494c4a6602480fefaf124f65418998.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 388843
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-5eeeb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6bq6ywkSCSpPzBYX0HI9jhO73TnyW8yeDsofK9OW2%2Buh1fRgwfBI3MkmgrdD2NP%2F2fFSq2mR76GHSmBg2ZIkrqmdvm1hV%2FSEAjcQ%2BFz50YVxc%2FbMMXk6GQBsmj9JituGehMSnG9Adg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb730afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 993 x 546, 8-bit/color RGBA, non-interlaced\012- data
Size:   388843
Md5:    04494c4a6602480fefaf124f65418998
Sha1:   a95d910d586099b2782e99fc8fa3af9f4c0b5326
Sha256: 51b11c64952b4fb9c0363b63465ffd70cc2db6e07698b9f4025d4dabd3fd682a
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/b920f29788a7e8b6409fbec70f7fe663.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 1969
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-7b1"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nh0K3FkrM09evmtPzowSL2hSjaNySs7K%2BVgX8d2WcdlxKHrJk8ryA7Hqr7bttCrQKQjZfjhmROU%2BUUIY6pmOURVMgwMvpsZcqLSeTUjKfuburcrcn0FoxD5dor7X5l6wkOZh%2FTeR5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb6e0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   1969
Md5:    b920f29788a7e8b6409fbec70f7fe663
Sha1:   7976b54ec9a7857ed3d78df626ae76702ff20eb7
Sha256: dda69d5f9b2dce7d4b18d451548e35e9486f93f22e76d0bffdf4cda0e9813756
                                        
                                            GET /nb_no/streaming-club?subid=5c86b149-578d-4232-9e4b-45b6872a203d&networkid=200274&publisher=1280&isNewTr=1&stream=game-the.last.spell-(63177).part1.rar HTTP/1.1 
Host: forever-stream.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             172.67.182.136
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
set-cookie: product=0e3982bd1559d08e8610f056adf761fde2bcc64dca58a4af5e6a8c0c5056df52a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22product%22%3Bi%3A1%3Ba%3A1%3A%7Bs%3A9%3A%22productId%22%3Bi%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax visitInfo::5308=a7dcbe92d57602fbc4f8f2ad83314e64ce2cfe843be615fb4948bc251ab1f3eba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A5308%22%3Bi%3A1%3Ba%3A4%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fa61432504990f6d8b7805f6077a7577%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200274%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221280%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%225c86b149-578d-4232-9e4b-45b6872a203d%22%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gcwaJMXhrVGd%2FeU3L3QNSb%2F5SpnOn8m8hFoFbMiJ72N3NZyZBQIeqkkljSIGvFU7hAecW0LdshK9Av3WbTL0IPXsQDE6yhISajVxQbZbHABHbFt%2FNfsdwZVserTJqfgWMBlCw24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ace85b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63705)
Size:   71252
Md5:    caa41a64f09870ac55ca504e3da2dbd6
Sha1:   c2d54a6ceeb1ca7c92bd6c28c9b39ae987beb8ae
Sha256: a6a019a6e310144e394a82024550df9c7c7785ad2d5105c7774a55a13d591402

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:57:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:57:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /prod/landings/nb_no/streaming-club/images/413852d4d0db5ee63859f79b9cedfdec.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 14461
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-387d"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nTLUeIqvmwezlvL%2B%2B7muz1syp4Ij6%2F6EW%2FTTGeNTCna0bNW5qHrsV3mQWDKDKF9kcNwafEWiOOCdgbdC%2Bjg8%2FMQA3VmWLIS2zyeNSvI0h%2BGV38CpcudqLVtjqhKaf05Kg4UOMaO3Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb6b0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 646 x 116, 8-bit/color RGBA, non-interlaced\012- data
Size:   14461
Md5:    413852d4d0db5ee63859f79b9cedfdec
Sha1:   9f0a2a5a312b69a72271ca6fe758f2a839322bfe
Sha256: 21831d109348705d9d45c4948b4ed44e59f271f7fe1e77c7ac9763fc11bdf9f9
                                        
                                            GET /prod/landings/assets/common/common/dist/bundle.js HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
etag: W/"641c5cc2-b073"
last-modified: Thu, 23 Mar 2023 14:05:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5832
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wW5MxIIFkbsi5HvmzQChE%2F8E1ZhlE8gLbbv9Y%2FwYCXxe23GD%2BeV3FlgVesdHm9t8Jq2iVzN1G24fFBEbg2hk3VZzxBP%2FVT6342Fm8vRjnIhQuShq3bFTftOkJMX6xcVDruAnH1N%2FjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb810afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45171), with no line terminators
Size:   145212
Md5:    b207f064f52fedf5ff243e29dbed782a
Sha1:   cd6f97a88aeddd1b1322738054a6778cc8c14e28
Sha256: 6e2723d962f4c4e31691e61007c4b89a809382c4395c60cf4582c6ba0c2d42ea
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/fonts/mulish/mulish-800.woff2 HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: application/octet-stream
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 16860
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
etag: "641afc9c-41dc"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4139
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FcJ5mQrQdrLv6zd2LxTLbMeLkBV%2Be06lJOlvLQzWiS4ajTQRexQzwKozIKCkI8aCFjYwmDgJ5TvyzHftI2TD5OAszEqIVdPhVZDvenwpzmoX7Qpjqgm68%2Fa6NmWvcNQoZospljaYuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3dcc5a0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16860, version 1.0\012- data
Size:   16860
Md5:    13049c7a16af3e830b7668f15f8e668a
Sha1:   f9eca560164be1be239e42c43cf8bb07aa7d8f14
Sha256: 3638d33930adfd35323251395221e7b9e1f2a641e6a1ead6e9d18d09588a2cfb
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/fonts/lato/lato-regular.woff2 HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: application/octet-stream
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 23484
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
etag: "641afc9c-5bbc"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4139
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F0Cez%2B6HQAW4dJkrhiSCJfAu2k%2F6JWrtg%2FB%2BZjXlnKm6XALFv6U5v2ZBpUiLwTFhkMKcwkgZjE13OIxCMTVsG%2BeGQ0Uyx0KTNWOEN25ycdoSxeKnnQ3TtFDvQDiP1kA2IcoLEjFd3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3dcc5c0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23484, version 1.0\012- data
Size:   23484
Md5:    b4d2c4c39853ee244272c04999b230ba
Sha1:   c82e22dde9716c40ba20e6c7ed03a1b66556de15
Sha256: c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 15:57:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Roboto:300,400,500,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.170
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 15:57:46 GMT
date: Thu, 23 Mar 2023 15:57:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   18060
Md5:    4d92da03a081ec2fefff685cd147b49e
Sha1:   a32883b74c2c8b9aed7ed284e9c3485e0fdb5ec5
Sha256: 3999375edff08dfa468f341fab8e8b862494b25e5b6112fe2e43354cc28dd221
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/cbc4798f289304647bdf758ea189b176.jpg HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 1485691
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-16ab7b"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4criL6R1n4REZxGUVCb%2BVEsMPcHxzi9YxXzP1FYi1tnvO7drrqyQ2xt7S3UIRyyYgJsD3hOS13nG%2FNQSJkyJxPfRyvNXR9LF6gpz1eUvxo6EUfp6FqBEkQN4XO6N516Ukz1IXtDH9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3dbc460afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 1920x1258, components 3\012- data
Size:   1485691
Md5:    cbc4798f289304647bdf758ea189b176
Sha1:   62d53e8027b42ed2c5e11ed1686cc049949ae7c5
Sha256: 68ca5fdb676eb5b7f6a7c9542c5629377abd184fc9022853acc152f127f5117f
                                        
                                            GET /c/hotjar-1962630.js?sv=6 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.39
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Thu, 23 Mar 2023 15:57:46 GMT
cache-control: max-age=60
etag: W/322d99c10d4b952415b4929c4c760b2e
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lOfyetn9DpW6Dj3eNbd9VM7uV9x6JTvlprJqJwSzgxG_go5RLjwBlw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7815)
Size:   72695
Md5:    9debd1eedfb4f6248a9347faaed44ec3
Sha1:   51072a9d8a8fe1337dd8501b1364f1188f895a50
Sha256: 072b424c03e8f13277da8d348db14e7e7270729f7c0e833216121979aa64e4b0
                                        
                                            GET /prod/landings/nb_no/streaming-club/images/ae126dcdf8581afd4f5287e47a865c4b.png HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
content-length: 917
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-395"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q7rnwcRIsMqO8O%2FNQv8Gm5Q79hsJ2J6aR%2BDKWCKwSQXK1fdGy93BQ3gqpTVtcs5APXjQrfb%2Fw240TUkXJmXiwid5YPLKqkNUb6wL2owZV35%2B95cRbt0VTvVu413WDu%2BH5FNIpURttA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df400ead0afa-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   917
Md5:    ae126dcdf8581afd4f5287e47a865c4b
Sha1:   467a70ace4e8ba22c6d060de9a51041158c93d0f
Sha256: 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 14:05:11 GMT
expires: Thu, 23 Mar 2023 16:05:11 GMT
cache-control: public, max-age=7200
age: 6755
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1490)
Size:   20085
Md5:    ca7fbbfd120e3e329633044190bbf134
Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445
Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
                                        
                                            GET /sessions/1962630?s=0.25&r=0.07065888317446634 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.70
HTTP/2 204 No Content
                                            
access-control-allow-origin: *
cache-control: no-store
date: Thu, 23 Mar 2023 15:57:47 GMT
server: Python/3.8 aiohttp/3.8.4
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dJeTJDB24xhjCcclS7t5nQF2G8A8sA3v0qAi-n01kMlBHeaQX4Kyhg==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.e2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 278
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 15:57:47 GMT
Last-Modified: Thu, 23 Mar 2023 14:39:43 GMT
Server: ECAcc (nya/788E)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M58ByKMqT8NY4g6TGX-sZyLi_9CHjNSwWyEtOYrzHrhvu0G98KujKg==
Age: 4685

                                        
                                            GET /async-api.737e0ca6-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: LLTB4EDFC5QdmDB6fBVQH93tx9tnr4EXlsaYC2YJm4sqjgK75ZMyTo22k8mG/8P1cD3albbe9oA=
x-amz-request-id: X1KWZ3FX1KK6PDEW
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "d12e5c859f6125ad9fcfab27abe9d60a"
x-amz-server-side-encryption: AES256
x-amz-version-id: .VExrz.uwnbfzMN2qSXv.A5mU3ucPuDN
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2010
x-timer: S1679587067.190466,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1123
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2129), with no line terminators
Size:   1123
Md5:    03dfc27bd3e9c55760c43279990e3229
Sha1:   b113bb4989edd07f098c6e1bb09b363444fac3ca
Sha256: 701b3c2622fc68fc8853e1898044bd46d6717de875a178bca0ecf2e533b0234b
                                        
                                            GET /lazy-loader.540ab0d1-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: HNXAVOU1+5WnN+AUDz2G+vBPOv0Zex2FvNHd5Lc4ngcrm02q0Use/ZfKYM1PCBaMYII9KuwAHiM=
x-amz-request-id: X1KHYM6H2X0GJ99K
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "a041a84a662929211a210e7b10cc82d0"
x-amz-server-side-encryption: AES256
x-amz-version-id: i5brlKSFH8dErjq3e9pOJ9e9W7YKVyAf
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2030
x-timer: S1679587067.191662,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 415
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (928), with no line terminators
Size:   415
Md5:    0b53ee06b30157139fb5c09dc6c0fe36
Sha1:   f3b8adc2a11e6b1bca4a21b390eba1d38b9b5a09
Sha256: bd24585f29a4e2ebc31878107971ff2f6bccd63fb3b004d67bf8d3068edc997a
                                        
                                            GET /178.52056f28-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: aT06CGh5oOpXrIqz5qwibNaMUOM/m7kcMAEg7Jf3TVcRfAagKDE4/nS+nf0+eQPu+zomW62XXt4=
x-amz-request-id: J3KF281NCW962AQS
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "b21a67c8e50dcceef0405ebb063eca96"
x-amz-server-side-encryption: AES256
x-amz-version-id: tfnJWGkgjVdXF5EV55Q2uJIk1QgPYrSL
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1830
x-timer: S1679587067.258732,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3764
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9255), with no line terminators
Size:   3764
Md5:    0cdee4386fc5e26c88588f13c1f98d2f
Sha1:   7f787ff772c58db6d8eb86e3718210cf02e823bf
Sha256: d2aea8be91ec37fa5c0f6fe1f65baba7486684ecbd60f73d56d22d423a657025
                                        
                                            GET /page_view_event-aggregate.2ae3c96c-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: RGUZ8edb5ibnhA3ai0RzLn0AOxcz8rfWlVv3yR0obJn8Nxhj+jSWLnK9qmK/G80UOegoBtuC5Q4=
x-amz-request-id: J3K0ZC8YB249SAHT
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "f768d3f0fb8ea163c644cfa4a536676d"
x-amz-server-side-encryption: AES256
x-amz-version-id: FeegzFVNqKt6H_XSfsFwZcx1Np._S4kr
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1820
x-timer: S1679587067.258839,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3814), with no line terminators
Size:   1713
Md5:    eb1f985802faf8e291793c6c6a509a0d
Sha1:   77a00623aa6fcce14e8acc3d17adbfe30e6d9f55
Sha256: 0b876f14f19c14c874c6e4f892517f91b36be238f18acebc5502d001244f65f9
                                        
                                            POST /api/v2/client/sites/1962630/visit-data?sv=6 HTTP/1.1 
Host: in.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 116
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.77.128.32
HTTP/2 200 OK
content-type: application/json
                                            
date: Thu, 23 Mar 2023 15:57:47 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2319
Md5:    c66da2fddfaca1cb9b5abafbae8db427
Sha1:   3ce6991909c05d4bafb95a5bb426591d0c5be8a7
Sha256: bb8a06918d324f857d55e48623689c360e0669829589cfac5fa55f96073782fe
                                        
                                            GET /metrics-aggregate.28086cfb-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: JlI9jEnvHwyUH5q51zPj7FC0eR8SIbY27K1rjyASXl8wqklVZ78+KkILmuVlfa9+u7BPhqCqDdg=
x-amz-request-id: J3KE7BT8ZDH9ZJM2
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "fd7ae418fde6eab067f9005c5dccc62b"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3OFnwVDELpuG2CawrTfxxEzGbg_GjKb5
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1831
x-timer: S1679587067.260308,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1752
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4128), with no line terminators
Size:   1752
Md5:    4bee99d08a8fc5bee885a4663ace89dc
Sha1:   96445a39f3eb3f8f3d7b90e7333c91ef365b249a
Sha256: 25809b8e76c7398e2ac3da2b317a79159fb1febbb30c170b5941181a7eabe0e3
                                        
                                            GET /jserrors-aggregate.941c6e17-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: WJlvLjGJlxrmBB8rgC9pVHFwHvXx9C2rr+PUuT0PJgAiqq/YbO4hm7afvFD3IsJsd2qC0CTtB/8=
x-amz-request-id: H85NTR4DKHDTZFMV
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "8a0b3cc73395206dfac178f98f412980"
x-amz-server-side-encryption: AES256
x-amz-version-id: wlVstoCC4UFYAF1ILBCZ5Nc.v2fH1cp7
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2745
x-timer: S1679587067.260434,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2938
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7661), with no line terminators
Size:   2938
Md5:    b94b9853573a235e49b390310d18f8c8
Sha1:   7edbeb499928788296b7e9eaaf52720b04423663
Sha256: bc57cadd1025ab6cbb6967cd21f5bbfc324f1a7c977fee20ee715a3ef074aa2c
                                        
                                            GET /ajax-aggregate.52cc993d-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: uKYdlJCnwz1StUhF9zoiWKtlQ6fpSBIIT63aZy+F/+pAESRra5qRoyNBoOwr10NRBsbtUX8zuO0=
x-amz-request-id: J3KDR0B9Q3E16DTY
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "02a285136a56fd1bcf1e6bf9df3ce3f5"
x-amz-server-side-encryption: AES256
x-amz-version-id: M7cKVh.sJWWYP936S672_AC9W1qCcjJQ
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1139
x-timer: S1679587067.260602,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2366
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5165), with no line terminators
Size:   2366
Md5:    83226cc545f1573770e17c74c06e369e
Sha1:   a308a4f8cd6bc78c354ca8ad123088a485aa55bf
Sha256: 44ce733b51e98d329bc679cca1958fbdf4539a4e4aa80f9715d3c90a19004012
                                        
                                            GET /session_trace-aggregate.545db67a-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: 2/LkMvvv/W3Vc2zaO7/N0k1X0D1BEr2QUVv7EW93g6wV5zsa/CZODpT5p0a62KCeZ7DEF+5k8TM=
x-amz-request-id: J3KB37HK18WBXXKE
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "00f1a92b2eb88dcbd4684c44ca621600"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8sXc8kke00U4XRsYmYhWsmLPR6EjlyYd
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1134
x-timer: S1679587067.260933,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3742
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9923), with no line terminators
Size:   3742
Md5:    e7e6ee264746303d21bbb267a9ba3d81
Sha1:   752836aa17acfc6b7df98c952d736ea06f41f776
Sha256: 45d351c15ee5f1e543c07e3986f9e310c7af6c518c2bb3ddef3ae9d75743870f
                                        
                                            GET /page_action-aggregate.2f41aaf7-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: cQya9Ywp0T2V/jWBNZ5XJuzu9cp1pmO6QX96R3G27WS7mhYd14VWFr8a14pQQ+odaVm54bHd9wQ=
x-amz-request-id: J3K8FWW5K0DE3R3B
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "92a020a299ca63b75917d615a52d026c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 33uPpeyapVuhMjJor_DeoOiouAFaWoOf
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1140
x-timer: S1679587067.261184,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1202
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2766), with no line terminators
Size:   1202
Md5:    0336e9116f41017d1f4ed8755e7fe22e
Sha1:   9f3418cc775a10992caab99e1591ea2c942e4c64
Sha256: 8dc96e300269a2f5b114a0e496e35fbbbf8d0afeb51f02b8a1edf61d317cc3d3
                                        
                                            GET /spa-aggregate.494130b7-1227.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: TIE1n7VMj7a0ZMKSZyXsxWQwz/KtqLTPsDtLZjBBbER8IkqtT+Hq/WcV1TH3DMAy7qYWlCTW2j4=
x-amz-request-id: J3KFTKZNH4ZC5FKN
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "c9a85289539a80c3ce75d510ee52f0c6"
x-amz-server-side-encryption: AES256
x-amz-version-id: MOfgH_1ttKzddlisAak1jm7fbEtINNGC
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 23 Mar 2023 15:57:47 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 775
x-timer: S1679587067.261530,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18780), with no line terminators
Size:   6664
Md5:    8663942728c4e3ba0df2337240c35ee3
Sha1:   cfad319e622269f9c3a29c2bc7e0e0df7bc4a6d6
Sha256: fa933e57987c869c0d563c218372a4c85acd6cf1d737cfc789a0b47a774ec96f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 15:57:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 15:57:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 15:57:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 15:57:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Thu, 23 Mar 2023 16:36:49 GMT
Date: Thu, 23 Mar 2023 15:57:47 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261caab9-983c-4eb1-9fca-fd73dc738e9e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10284
x-amzn-requestid: e4d2c324-d0b0-436d-9739-29269e62aed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM6hjEqtIAMFvXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b713c-5a5bd6b60c1f52ab580f1757;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:21:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Pv-MA9gQ4PmXuY3EWSC77_g2fn_C9-bYUQ4azcrxLNvtwY6CZZg1nA==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:55:01 GMT
age: 28966
etag: "5035ed41f497c97faefae9cdaf42dc07ab468557"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10284
Md5:    4e89d0b1281259e7399294fb5fa19d2b
Sha1:   5035ed41f497c97faefae9cdaf42dc07ab468557
Sha256: f404d286deab5b4759be6e554e6488faab3b4f7988a86eb57520dac4e0d6a192
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 65403
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/main/styles.css HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=88134
etag: W/"641afc9c-15846"
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dK5udEZSwiMsPNDEGJhE621G4hV25W6iMBY0xidTYBUKqjcCYVLIPHeNTN1d7RSZn5iXjpN%2BxHOVD4cto%2BngCVMZDZheytvXwQwZwO%2FBPiVSalGVh%2F2QYFUlD23BX3ZSt2MejvBL5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3ceb690afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65328)
Size:   25223
Md5:    9e207c0008ec70cd8bf6bb3a35bf1160
Sha1:   586367d28443631af37b99138ba0d2a67779622a
Sha256: 18b1401ab91fb4659038af0acd21c2f823c75f709daf1cf5796292cc2d839222
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5950
x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CKyF9EI3oAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: tu0ENc_6tfykYc23nLfwYEMsi5HIfaDWF6dvzVTfX5rfjr3JrmMrCA==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:02:44 GMT
age: 64503
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5950
Md5:    800c2662fd6ab8829a02b7d63084c38d
Sha1:   0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
Sha256: 76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4905
x-amzn-requestid: f2297c3e-1187-48f5-bffb-c5ea1a79a10b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFgcF4_oAMFd6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b602-02696af01c0d586c631c5b45;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:13:06 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: R9mjcik3i0kISOeO4gVZP6XhhvZO00mriabAtJ8vv1kNhRpz_lfsHQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 06:31:03 GMT
age: 34004
etag: "4f25bdbffca3803b02c196c38491223684d36b4d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4905
Md5:    90f64fe111aa6e90ebf52e0335d21b75
Sha1:   4f25bdbffca3803b02c196c38491223684d36b4d
Sha256: 37894e16112286470b7fd2e0bbd5ca74944e6cb5ca6e8aff189c4515122a0d40
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:54:24 GMT
age: 29003
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /1/NRJS-077d8efdf93074208a7?a=505160063&v=1227.PROD&to=MhBSZQoZVxYHAU1eXwtaZUMRV1ALAgdBGUANBQ%3D%3D&rst=2377&ck=0&s=0d0d49dab91bdf01&ref=https://forever-stream.com/nb_no/streaming-club&ap=117&be=1350&fe=740&dc=395&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679587073234,%22n%22:0,%22f%22:1078,%22dn%22:1079,%22dne%22:1132,%22c%22:1133,%22s%22:1135,%22ce%22:1147,%22rq%22:1147,%22rp%22:1320,%22rpe%22:1323,%22dl%22:1328,%22di%22:1728,%22ds%22:1744,%22de%22:1746,%22dc%22:2087,%22l%22:2087,%22le%22:2097%7D,%22navigation%22:%7B%7D%7D&fcp=1669&at=HldRE0IDRBg%3D&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.eu01.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.221.85.3
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Date: Thu, 23 Mar 2023 15:57:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7ac7df432a9409a3-ARN
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 4
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VRKJqKCDIDcExDNLrveHKEID69BTVOM816WwKFsuql1ZYQpffetOCoCn8jzRLzDiRgKkaWzWDgnDg41nqW%2BGOa68ii%2B7e%2BdNyvXneGkOjh5OUV3SYWuyjcMb0s%2Bb7syI4BDiONNk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   72
Md5:    107d93e382e2c9b00fbf9fb0edc65d86
Sha1:   77e750e3ebf9706f4f6dd253785602d70be17c6c
Sha256: a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
                                        
                                            POST /events/1/NRJS-077d8efdf93074208a7?a=505160063&v=1227.PROD&to=MhBSZQoZVxYHAU1eXwtaZUMRV1ALAgdBGUANBQ%3D%3D&rst=2568&ck=0&s=0d0d49dab91bdf01&ref=https://forever-stream.com/nb_no/streaming-club HTTP/1.1 
Host: bam.eu01.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 677
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.221.85.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 23 Mar 2023 15:57:47 GMT
Content-Length: 24
Connection: keep-alive
CF-Ray: 7ac7df43bbb909a3-ARN
Access-Control-Allow-Origin: https://forever-stream.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
x-envoy-upstream-service-time: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGjq4ekRsMy6dohDIaQZehS2HLlzIRm2JISKBBe3Og1XFxOUo5g7H%2BEImCv367nvYatWPwsDxqxgSAYqRmLRNEJd3ZdYLAakGm2yjr3HFZL5KwZAX%2F73rdtkIZ3qGGqJ3Yv9XQFf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   24
Md5:    bc32ed98d624acb4008f986349a20d26
Sha1:   2d3df8c11d2168ce2c27e0937421d11d85016361
Sha256: 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
                                        
                                            OPTIONS /register/event_log/3mg6wlr7e1 HTTP/1.1 
Host: event.secureanalytic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forever-stream.com/
Origin: https://forever-stream.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.104.16
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:57:47 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6DvPXGD7RiG3hRbJeEZ10GD7kPVQvOJPvu2rSgjGk5haTuqihsasL%2FZ%2BfDb9RSsr97fwbw0LPWnklvAgtOeQDqaAw6H48WDcYDzmYUikMrOtGAmXTBJ02%2FwGLDRJPfJMRo2K3eJ0hLuQxus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac7df444dbf74bd-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /register/event_log/3mg6wlr7e1 HTTP/1.1 
Host: event.secureanalytic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forever-stream.com/
Origin: https://forever-stream.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.104.16
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:57:47 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RbHdj%2BFeBXB98E1YwMzzeq9ZIpwUlEOWDOFcGluI8s%2Fzvc5Ccb5yIbr2iGiUPqR5Ik5Ec27a6Q30vXOFeHxlP466dfuXKqPPwGVxb81VEYsg3kR2JtCHpD2ezzcj6auG%2F4N8ymw1%2BeStWS4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac7df443dbc74bd-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /register/event_log/3mg6wlr7e1 HTTP/1.1 
Host: event.secureanalytic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forever-stream.com/
Content-type: application/json
Origin: https://forever-stream.com
Content-Length: 148
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.64.104.16
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:57:48 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rK8GHVGvTyiRK7gIIq%2B9RqnWtZJBEG31BQr1I%2FYTb%2BQ3D5FLk9m3SWfsviBmr2%2FvUlH7qabgx9CCguCFjnwHAfDFEmocHLHJCvLGaKwcyG7Z15fz2%2BLwhbmeZNO9V4WsLc8n8VLdO%2Bzcec4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac7df4679ba74bd-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /register/event_log/3mg6wlr7e1 HTTP/1.1 
Host: event.secureanalytic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forever-stream.com/
Content-type: application/json
Origin: https://forever-stream.com
Content-Length: 109
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.64.104.16
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 15:57:48 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S5ntQB67q8jr9S%2Fi0iG2vDQn%2B3ByBlfk%2FwfIf8cgvgmP60fYYgE%2Bz094Exn2RS4mRe8DRFw5dm48Zqpi7zEsx9quYFmI2aUfsAihjXCB%2BM1vfqEFVZjN88NXQaUcJO3P%2F93SJiHXlgU9Zx8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac7df4679b274bd-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pvFey5NWlIqIXlHLMYSUiylATCU1ZxodOb6imsPCxrJDRscwky8dVQ==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:48:27 GMT
age: 65367
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9459
Md5:    412bd6aea60211324e649d7d920601d2
Sha1:   a813976bda850a584b5ab94d9a70bfe0da69aca0
Sha256: d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9
                                        
                                            GET /scripts/push/script/02eyoyxdkz?url=forever-stream.com HTTP/1.1 
Host: secureanalytic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.105.16
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: HIT
age: 456
last-modified: Thu, 23 Mar 2023 15:50:10 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nEOy9uXQ8uzGt%2FWS9c5Guwywrz3EkKLyzhevY3P%2FUD4t9DHNXrR2XLgNaxGKqTn4XN91ZEJFg8ZlR064z8qF9CA3FYKHBzyVQ9TeusLappQVhhbvteMJzXyuutnNa7zQnZRRtJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac7df3f3c7171ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/brands/video.css HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=16357
etag: W/"641afc9c-3fe5"
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQ5IRyhwvQ7dk5rJ5vSwbN4svN8AxRNqGVIMabvv6fJGf8owAkcOH7KjMSZ09XoHPMoDpBeZW2hGsc6vW37bR%2FVAuPw0jr83dAwMFBPlpPnClsGCDMdSxMZrI0BRHgscO5sq%2BxS4kA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb7f0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/js/scripts.js HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=279
etag: W/"641afc9c-117"
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5831
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iILdoaG0GvQkw9cRMw%2FQAmlNxDHhjqSQE2cCKKf%2Bk9ZrSdbgEdSmZ8F09RnH9AkrmpLrDsILSoR4KbqGDLAsJQs2p3cDzfvz1wIxLcyveXLbdlNyXqmtm6KFiziXslpdDK630eSmFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb850afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/layout/layout.css HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=32605
etag: W/"641afc9c-7f5d"
last-modified: Wed, 22 Mar 2023 13:03:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5833
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bULhCNVxuBzvKknvGhD%2FuaB0uAlqRyWm8xQq%2FZrFJ1YpwPZnRdi%2FT7HXZa6MGXnIGfhTUhKGs66BSXrwRhHexyLqY1o8X55sY6zljcTOV50e1SH4HiBG6p4ja5AEvDsElpE4Y7grRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb840afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /prod/landings/assets/common/common/dist/vendors.js HTTP/1.1 
Host: cdn.content-loads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.26.8.128
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 23 Mar 2023 15:57:46 GMT
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=519858
etag: W/"641c5cc2-7eeb2"
last-modified: Thu, 23 Mar 2023 14:05:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5832
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Zx2tTumbamlm%2FUFjCVXErFNHCpBznVXTc18OZsY%2FZQSyyvzU9F9JKbM2iULgDo3YoKGgQh1rMtIqe6DrieBjTZxhJufx0rox018bOacW1dgBPIm17wmajMUtezRgTYzOT1bCj8n8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ac7df3cfb820afa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: