a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=test_dat_3&affiliateID=75077&source=102c9857aa269261f7a504f161d4c4&subID2=55609&target=&Site=&Bnr=ALGO&cid=weosbdr32s9qiecmi8grifdg&affsource=test_dat_3&source=55609_test_dat_3
302 0 B URL HTTP/1.1 a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=test_dat_3&affiliateID=75077&source=102c9857aa269261f7a504f161d4c4&subID2=55609&target=&Site=&Bnr=ALGO&cid=weosbdr32s9qiecmi8grifdg&affsource=test_dat_3&source=55609_test_dat_3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=test_dat_3&affiliateID=75077&source=102c9857aa269261f7a504f161d4c4&subID2=55609&target=&Site=&Bnr=ALGO&cid=weosbdr32s9qiecmi8grifdg&affsource=test_dat_3&source=55609_test_dat_3 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 03 Feb 2023 22:23:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub5=&aff_sub=test_dat_3&aff_sub2=55609&aff_sub3=wd00pguu16im0ecmiu3hbsde&aff_click_id=102c9857aa269261f7a504f161d4c4&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_test_dat_3
Pragma: no-cache
Set-Cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=i7WLn06tCREL3KkfwUrmhgIVylsLUaQ8faPwS5xDxL0; Max-Age=86400; Expires=Sat, 04-Feb-2023 22:23:11 GMT; Domain=a.vfgtc.com; Path=/; HttpOnly
cc-v4=I%2F7GDlifNoOZI9GiloBFjzviWPUjRrDxd5pROfWk%2Fv%2FkwHPM0WK7UQBcxV8qzbf9GMDZv3kgMiWTRnweI4zjyTBXtbCKqmpMxtFq0NUnOEZoK2JbrTqcD1uLJC9L0WFTFcFdmkRHkD6%2FHD4IRFyi3Q%3D%3D; Max-Age=31536000; Expires=Sat, 03-Feb-2024 22:23:11 GMT; Domain=a.vfgtc.com; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9341
Expires: Sat, 04 Feb 2023 00:58:52 GMT
Date: Fri, 03 Feb 2023 22:23:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8381
Expires: Sat, 04 Feb 2023 00:42:52 GMT
Date: Fri, 03 Feb 2023 22:23:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 21:36:11 GMT
content-type: application/json
age: 2820
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8806
Expires: Sat, 04 Feb 2023 00:49:57 GMT
Date: Fri, 03 Feb 2023 22:23:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8cu10lDlkb+2DpDErreRPb3JKKsZjv1BKEVYxbegjzQ754V4pTivRQumZ5WcY1SS9lV70YOWLCE=
x-amz-request-id: JRC0RKHYNWSCSKMQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 21:23:42 GMT
age: 3569
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 22:23:11 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 41bb8ccd648809a344d0ca2fad720965
688046763e4a551675154df85302b591c6de3895
dffbd6064d5a7772a3c09d4ebcbbc52fe62d02ca5889bad2dab4302d23a63e72
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFFBD6064D5A7772A3C09D4EBCBBC52FE62D02CA5889BAD2DAB4302D23A63E72"
Last-Modified: Fri, 03 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18756
Expires: Sat, 04 Feb 2023 03:35:47 GMT
Date: Fri, 03 Feb 2023 22:23:11 GMT
Connection: keep-alive
s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub5=&aff_sub=test_dat_3&aff_sub2=55609&aff_sub3=wd00pguu16im0ecmiu3hbsde&aff_click_id=102c9857aa269261f7a504f161d4c4&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_test_dat_3
303 See Other 1.0 kB URL HTTP/2 s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub5=&aff_sub=test_dat_3&aff_sub2=55609&aff_sub3=wd00pguu16im0ecmiu3hbsde&aff_click_id=102c9857aa269261f7a504f161d4c4&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_test_dat_3
IP
File type HTML document, ASCII text, with very long lines (1000), with no line terminators
Hash 84e1e79a37cd4b3c9cafab4ea58e97c7
d29a17bdfcb97992e83d1c7f15fbc9b41400a65a
7af479de810c721b9bad3f76e4fe02f793ecc4159a77301ed5c1d373ecdc98bc
GET /75077/3785/26412/?aff_sub4=_bucket&aff_sub5=&aff_sub=test_dat_3&aff_sub2=55609&aff_sub3=wd00pguu16im0ecmiu3hbsde&aff_click_id=102c9857aa269261f7a504f161d4c4&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_test_dat_3 HTTP/1.1
Host: s.sloffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
server: nginx/1.19.0
date: Fri, 03 Feb 2023 22:23:11 GMT
content-type: text/html; charset=utf-8
content-length: 1000
location: https://a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_dat_3%3B55609_test_dat_3&affiliateID=44542&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&s2=10243ebb1368e570dca56ab9cefd6c&s3=test_dat_3%3B55609_test_dat_3&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_dat_3&affsource=test_dat_3&aff_click_id=10243ebb1368e570dca56ab9cefd6c&affsource=55609_test_dat_3&bo=2753%2C2754%2C2755%2C2756
set-cookie: aff_ran_url_3785=26412; Path=/; Expires=Sat, 04 Feb 2023 22:23:11 GMT; Secure
enc_aff_session_3785=ENC0358d7919af8b3dd2e1526f2a823f2e222d54c199eb779b44f61ff631931c1f420e9dd37072531e6cd0177d503f5ba0c86ea52518954a7496b598d84a86e89bfa08f8dba5404a06742a7cc0f20c6b3e1d578268504b859adb74c2d12fef1f53e01ba27e12c34dabbb7dc9d9e28dabf41df77643191eaeb0f92f376ab2f60c8b98524abba91f432716f3f87fa1d364d716107be951ffccab9a0007d6fdb7b2d4d1a36d5e825ddef494e0fef17ee70f60bef6ee121fc9d4b402567463b9a35e1521f1f0e12e6; Path=/; Expires=Sun, 02 Feb 2025 22:23:11 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Mon, 29 Dec 2025 09:03:11 GMT; Secure
tracking_id: 10243ebb1368e570dca56ab9cefd6c
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 22:07:19 GMT
age: 952
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_dat_3%3B55609_test_dat_3&affiliateID=44542&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&s2=10243ebb1368e570dca56ab9cefd6c&s3=test_dat_3%3B55609_test_dat_3&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_dat_3&affsource=test_dat_3&aff_click_id=10243ebb1368e570dca56ab9cefd6c&affsource=55609_test_dat_3&bo=2753%2C2754%2C2755%2C2756
302 Found 0 B URL HTTP/2 a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_dat_3%3B55609_test_dat_3&affiliateID=44542&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&s2=10243ebb1368e570dca56ab9cefd6c&s3=test_dat_3%3B55609_test_dat_3&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_dat_3&affsource=test_dat_3&aff_click_id=10243ebb1368e570dca56ab9cefd6c&affsource=55609_test_dat_3&bo=2753%2C2754%2C2755%2C2756
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_dat_3%3B55609_test_dat_3&affiliateID=44542&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&s2=10243ebb1368e570dca56ab9cefd6c&s3=test_dat_3%3B55609_test_dat_3&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_dat_3&affsource=test_dat_3&aff_click_id=10243ebb1368e570dca56ab9cefd6c&affsource=55609_test_dat_3&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1
Host: a.vfgtf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 22:23:12 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_dat_3%3B55609_test_dat_3&affiliateID=170910&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wd00pguu16im0ecm2tjvhblq&affsource=test_dat_3&source=75077_test_dat_3
pragma: no-cache
set-cookie: ab267e05-23a0-430a-bac4-772f7f629740-v4=WBIkWCpmhSm2sJZslVdqHHvn2eby-1ScPmw6SOBtxDA; Max-Age=86400; Expires=Sat, 04-Feb-2023 22:23:12 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=3FYN5R8a9SUIHFoH6kHlCS7SFpgcuBmKm5rlTl7j1caN2bkCSvmkos1CYvxFC43Vo3Ma%2BpVRhdIJV%2F7ibz2%2BzTXgwdLfw7tBZybgi0Wmrs5jiu%2FT%2BF1LWWQpdSFCF2CcsL7GVm%2BWIkfXJGut5MOa5Q%3D%3D; Max-Age=31536000; Expires=Sat, 03-Feb-2024 22:23:12 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_dat_3%3B55609_test_dat_3&affiliateID=170910&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wd00pguu16im0ecm2tjvhblq&affsource=test_dat_3&source=75077_test_dat_3
302 Found 0 B URL HTTP/2 a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_dat_3%3B55609_test_dat_3&affiliateID=170910&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wd00pguu16im0ecm2tjvhblq&affsource=test_dat_3&source=75077_test_dat_3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_dat_3%3B55609_test_dat_3&affiliateID=170910&source=10243ebb1368e570dca56ab9cefd6c&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wd00pguu16im0ecm2tjvhblq&affsource=test_dat_3&source=75077_test_dat_3 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 22:23:12 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=test_dat_3%3B55609_test_dat_3&aff_sub2=75077&aff_sub3=wdt3ufqh71t0aecm22r96tnu&aff_click_id=10243ebb1368e570dca56ab9cefd6c&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_test_dat_3&source=75077_test_dat_3
pragma: no-cache
set-cookie: 2d2fb929-79a5-4a1c-840d-3f370da182b6-v4=YnBDNXt9NjYPpnFK3gLeAHRNMt-ejypJJuXxUVm3NTw; Max-Age=86400; Expires=Sat, 04-Feb-2023 22:23:12 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=hJoDwte8umkvNQJgP7XGbveKXuLGihnve4HwS7dxBYUWkkYCNCsG8qr1Tlbwjs0P3aDUAKBJNht0gvZH4HQxpyXC3dZQ9rTTXAmpk5V8VfXLq227JnKBTu4ynPK6ah12SAT83Y2Xkn2rBjheHQJDMA%3D%3D; Max-Age=31536000; Expires=Sat, 03-Feb-2024 22:23:12 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14920
Expires: Sat, 04 Feb 2023 02:31:52 GMT
Date: Fri, 03 Feb 2023 22:23:12 GMT
Connection: keep-alive
s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=test_dat_3%3B55609_test_dat_3&aff_sub2=75077&aff_sub3=wdt3ufqh71t0aecm22r96tnu&aff_click_id=10243ebb1368e570dca56ab9cefd6c&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_test_dat_3&source=75077_test_dat_3
303 See Other 392 B URL HTTP/2 s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=test_dat_3%3B55609_test_dat_3&aff_sub2=75077&aff_sub3=wdt3ufqh71t0aecm22r96tnu&aff_click_id=10243ebb1368e570dca56ab9cefd6c&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_test_dat_3&source=75077_test_dat_3
IP
File type HTML document, ASCII text, with very long lines (392), with no line terminators
Hash 233a6cefcdfe59ade3d5197dcf8df0af
03ff86bd81fcc53e15f7198825fb6c338e289570
7b5ca6604a0fc579de88229590f5ddd9080d351f9ebcfa7ab5e91def591ceeba
GET /170910/8373/0/?aff_sub4=_bucket&aff_sub=test_dat_3%3B55609_test_dat_3&aff_sub2=75077&aff_sub3=wdt3ufqh71t0aecm22r96tnu&aff_click_id=10243ebb1368e570dca56ab9cefd6c&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_test_dat_3&source=75077_test_dat_3 HTTP/1.1
Host: s.sloffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff_ran_url_3785=26412; enc_aff_session_3785=ENC0358d7919af8b3dd2e1526f2a823f2e222d54c199eb779b44f61ff631931c1f420e9dd37072531e6cd0177d503f5ba0c86ea52518954a7496b598d84a86e89bfa08f8dba5404a06742a7cc0f20c6b3e1d578268504b859adb74c2d12fef1f53e01ba27e12c34dabbb7dc9d9e28dabf41df77643191eaeb0f92f376ab2f60c8b98524abba91f432716f3f87fa1d364d716107be951ffccab9a0007d6fdb7b2d4d1a36d5e825ddef494e0fef17ee70f60bef6ee121fc9d4b402567463b9a35e1521f1f0e12e6; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 303 See Other
server: nginx/1.19.0
date: Fri, 03 Feb 2023 22:23:12 GMT
content-type: text/html; charset=utf-8
content-length: 392
location: https://tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_test_dat_3&sub3=102d8137f84af9d961e795443a8e78&bo=2753%2C2754%2C2755%2C2756
set-cookie: enc_aff_session_8373=ENC03f7e93b5a2f88d3718e95aa3be86be7264acc7630d13568b716066c67854466758b7ab6860ebe8c19b47a528c46f3ba67687587a418232a732c95fca9087d07dc291f912f7ca91aeb4b855dca52f0fb99e033bc9b3737a86a6bd6ed84c0e4c5c8d9cdfcd350ae7b7d8065fc453b6e2f0d9c2db4c86575eb644ef1727b058b13b579bacb71065a7014ad6eb3c5daa3cc30f1d79bb4e0236775ac2864781a95a5920273479d96d0b8641338f712adf6091a5314dba496ff4f6d7752429ba46c532e3cb2e3f5fa91763855726a6a087f8166989ae0346bcc446823f141784095125131b6afb9; Path=/; Expires=Sun, 02 Feb 2025 22:23:12 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Mon, 29 Dec 2025 09:03:12 GMT; Secure
tracking_id: 102d8137f84af9d961e795443a8e78
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 417451ad70e83e63200637d4e6336a6e
8e5dd2ac33a9f26e99384f9309ced358e1fa9371
80cc3401afac73579d547df89b595a80b7a09dc9125cf856b01803093df2649f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "80CC3401AFAC73579D547DF89B595A80B7A09DC9125CF856B01803093DF2649F"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5689
Expires: Fri, 03 Feb 2023 23:58:01 GMT
Date: Fri, 03 Feb 2023 22:23:12 GMT
Connection: keep-alive
tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_test_dat_3&sub3=102d8137f84af9d961e795443a8e78&bo=2753%2C2754%2C2755%2C2756
302 Found 0 B URL HTTP/2 tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_test_dat_3&sub3=102d8137f84af9d961e795443a8e78&bo=2753%2C2754%2C2755%2C2756
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=781&offer_id=1085&sub1=170910&sub2=75077_test_dat_3&sub3=102d8137f84af9d961e795443a8e78&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1
Host: tracking.t0r4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 03 Feb 2023 22:23:12 GMT
content-length: 0
location: https://zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_test_dat_3&campaign=&sum=&clickid=63dd8950ea9e7e00010d870a
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63dd8950ea9e7e00010d870a; expires=Sat, 03 Feb 2024 22:23:12 GMT; secure; SameSite=None
afoffers={"1085":1675462992}; expires=Sat, 03 Feb 2024 22:23:12 GMT; secure; SameSite=None
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=opQ8v%2FC0y7GlpheCa%2FA51qaMfbq9xkJKbdRYyHxzTWyKavSc2YEDSIG%2BG%2Bv1VK3pHCI7aalEXkFlBN3ixGdZZs3RDcULAZW1DWjtAahioUayo2pVSeKKWUj3bD9nj29lddWKsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793e91d64e981c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 417451ad70e83e63200637d4e6336a6e
8e5dd2ac33a9f26e99384f9309ced358e1fa9371
80cc3401afac73579d547df89b595a80b7a09dc9125cf856b01803093df2649f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "80CC3401AFAC73579D547DF89B595A80B7A09DC9125CF856B01803093DF2649F"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5689
Expires: Fri, 03 Feb 2023 23:58:01 GMT
Date: Fri, 03 Feb 2023 22:23:12 GMT
Connection: keep-alive
zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_test_dat_3&campaign=&sum=&clickid=63dd8950ea9e7e00010d870a
302 Found 0 B URL HTTP/2 zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_test_dat_3&campaign=&sum=&clickid=63dd8950ea9e7e00010d870a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_test_dat_3&campaign=&sum=&clickid=63dd8950ea9e7e00010d870a HTTP/1.1
Host: zzotrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 03 Feb 2023 22:23:12 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wd00pguu16im0ecm2jtpp4uc&aff_sub3=170910
pragma: no-cache
set-cookie: 381f1b1b-7ced-4eef-857b-418b4c176094-v4=VWE-RLpt6ON2f6SQJf-VohHbUSnprO20CGOfk6b_zpg; Max-Age=86400; Expires=Sat, 04-Feb-2023 22:23:12 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=6PylmVPY1mEaRSdEDMWCIGzhGMunhE5utDd0dYqwSR9HGoVRNBAIsYeiTlcWujcffk3m55i2iVCjioJ8TqMS2cppjtasj5EaMRb2qYLMPksruu1BrR6p9ia5bXvu6JZkZYZEubWGocFtc0TPQrC%2F%2FQ%3D%3D; Max-Age=31536000; Expires=Sat, 03-Feb-2024 22:23:12 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KCcGga0RoUsikMqzA6yS1w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wyCmntK0R+M8ZuyHlQYsFcnxO9U=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 23c5cd6943f470546f464f9778d06d0c
4e218413b9c3b0d6bb2920e50d82fff97304358d
a9ac5c494782482b03f5f82990ac06b41c1119982deadba88862f3b9388147ef
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 22:23:12 GMT
Last-Modified: Fri, 03 Feb 2023 21:04:24 GMT
Server: ECS (dcb/7EA6)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: osKsYtAjSvESwpTFo8beKaIMxQU44H2hJI5dkKIbTOIoDmDCGy3yoA==
Age: 4728
www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wd00pguu16im0ecm2jtpp4uc&aff_sub3=170910
302 Found 403 B URL HTTP/1.1 www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wd00pguu16im0ecm2jtpp4uc&aff_sub3=170910
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash df59220d682383bbd4610005e7823f49
18a38d5c19e8a1a85d1c36713498ce633de00ffe
f24bd2720a7f2b7a56a56c0df985721c7b18b6cae72db5ed64a08aba6af14dec
GET /aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wd00pguu16im0ecm2jtpp4uc&aff_sub3=170910 HTTP/1.1
Host: www.ntr4x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 03 Feb 2023 22:23:12 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 403
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.våtedrømmer.com/campaign?utm_campaign=6535&utm_term=102776e78c92f471ec3173d75ca013&utm_source=170910&utm_content=wd00pguu16im0ecm2jtpp4uc&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_1672=ENC036463a8d605b729f3fbb9b24c4851194af7e558d4c5c9251ec10e7c0530fb35dab36cca1e34f8a82fb7226ecc45520b2ec6b3c9fe819d411da3eb9dc54586a76a888aaaf6ffd57fa930ba86e783471e52a1a5f34c49a12673283467584f74919beb911aee9d0a23c84324514d07d47a5f8a35791078c58133da647dd5c57c029a4467d18638bbc6a925860543d244e1ae129aea45ced7f6798ba7bbd33bdd249f588bef8c137c5b3e783b08aa44a049cd1af82c3763725ea5c34b06f9c61113321ed7934d; expires=Sat, 04 Feb 2023 22:23:12 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Mon, 29 Dec 2025 09:03:12 GMT; path=/; SameSite=None; Secure
Tracking_id: 102776e78c92f471ec3173d75ca013
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: c75a172a43ac4e69ee689cc1ffb87f31
Access-Control-Allow-Headers: Tune-SDK-Version
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ae8546a5d31983ff3127bd5ad6dc1e14
07c697b8af3bdafa3043c0490c52685a9f426f9a
b07b02b736c0bf608dc1a7106d816ca88b642aef62f9b280834e549f9232c639
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169310
Date: Fri, 03 Feb 2023 22:23:13 GMT
Etag: "63dd7baf-1d7"
Expires: Sun, 05 Feb 2023 21:25:03 GMT
Last-Modified: Fri, 03 Feb 2023 21:25:03 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tlF2igvuc-V5g3MN6yZIbJkrvab17lig2MVcZIK-HKzHBu4vVY7vXw==
www.xn--vtedrmmer-52a7s.com/campaign?utm_campaign=6535&utm_term=102776e78c92f471ec3173d75ca013&utm_source=170910&utm_content=wd00pguu16im0ecm2jtpp4uc&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
302 Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/campaign?utm_campaign=6535&utm_term=102776e78c92f471ec3173d75ca013&utm_source=170910&utm_content=wd00pguu16im0ecm2jtpp4uc&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /campaign?utm_campaign=6535&utm_term=102776e78c92f471ec3173d75ca013&utm_source=170910&utm_content=wd00pguu16im0ecm2jtpp4uc&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781 HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate, no-cache="set-cookie"
date: Fri, 03 Feb 2023 22:23:13 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /landingpage
pragma: no-cache
server: nginx/1.22.0
set-cookie: PHPSESSID=3bm7seipn9mcndouoiqf0cirbm; path=/
AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32520325AADA91780B595F9C3B592641F8BB941526A518EB8BDF607BCDCEA6DA03DF1708BB933D9E88C09FD81497215D106A;PATH=/
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s9ykFU-OJD6Iug8BrwDL4U3dDddhWP6IUpwQwv3oSAU8EEGGHuP4Fg==
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/landingpage
302 Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/landingpage
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landingpage HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=3bm7seipn9mcndouoiqf0cirbm; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32520325AADA91780B595F9C3B592641F8BB941526A518EB8BDF607BCDCEA6DA03DF1708BB933D9E88C09FD81497215D106A
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate
date: Fri, 03 Feb 2023 22:23:13 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /lp/lp24
pragma: no-cache
server: nginx/1.22.0
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eNteEg1LeO4v9tldta8_cteiVmYSNWDKDb4DoFUm_OwD65tNkWMMKw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14959
Expires: Sat, 04 Feb 2023 02:32:32 GMT
Date: Fri, 03 Feb 2023 22:23:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14959
Expires: Sat, 04 Feb 2023 02:32:32 GMT
Date: Fri, 03 Feb 2023 22:23:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14959
Expires: Sat, 04 Feb 2023 02:32:32 GMT
Date: Fri, 03 Feb 2023 22:23:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14959
Expires: Sat, 04 Feb 2023 02:32:32 GMT
Date: Fri, 03 Feb 2023 22:23:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:19:32 GMT
age: 221
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e706db8a6107758a148463e916f2532d
4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81
673f18036a53f8ff297ef6a63fd094e7c41d90f3960f0e687a741cc7dd3f6172
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6791
x-amzn-requestid: 665115ea-728e-4a55-aaf8-b09db3fa67a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffl96FIzIAMFYGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61d25-0abbd7262ca10b7a7d2bf9eb;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:15:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4AYGPfUtBg6gZVwbq1z3zkK0-4Z3jvbxynj8mpPvitsEGuuElhsQHQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:14:10 GMT
age: 543
etag: "4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:05 GMT
age: 2108
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hSyEfSDToqgfnFIW68Krz-ANYUNQoUPWhyb-8xDUarI6mnVLXriHDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:59:56 GMT
age: 1397
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:04 GMT
age: 2109
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YSIrWiXEs3KiiTJpzc8aZ-qsp1rNa8FLDAtw0gB0rEWQxg8bISSn_w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:57:54 GMT
age: 1519
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 22:23:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.xn--vtedrmmer-52a7s.com/lp/lp24
200 OK 122 kB URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/lp24
IP
Size 122 kB (122320 bytes)
Hash a25dc57f41fc1d8d8c1b8f9a3a0ef06d
ef4f1d97e500a3a9c1fd0c1a1331fa3dc76b9f32
1bb20f27812f733b78b87955073d450a969bf70717859a304fc553205c0753ac
GET /lp/lp24 HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=3bm7seipn9mcndouoiqf0cirbm; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32520325AADA91780B595F9C3B592641F8BB941526A518EB8BDF607BCDCEA6DA03DF1708BB933D9E88C09FD81497215D106A
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Fri, 03 Feb 2023 22:23:13 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DknARrcOrgyahZO8XfgDGXq_g--4KxnF_00csXDdZFTe6jk6bK2tFg==
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/project/489/logo_dark.png?config=7826
200 OK 10 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project/489/logo_dark.png?config=7826
IP
File type PNG image data, 320 x 71, 8-bit/color RGBA, non-interlaced\012- data
Hash dea19df8bf5758e2af9921e166e1420d
4f4610c28f3bad69e8b72d7f6379dcf61f50bd39
2cac0168f0a0c24154662208ee88cfe4213a26fe64c18211fcfcea31f6338b78
GET /project/489/logo_dark.png?config=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10042
date: Wed, 01 Feb 2023 08:21:59 GMT
last-modified: Fri, 13 Nov 2020 10:55:08 GMT
etag: "dea19df8bf5758e2af9921e166e1420d"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s4cJp9XHOKW0E9DLbDXykCDS426bcV44FtTfQtQQ6vF4upqvLDneAQ==
age: 223276
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/landingpage/script.js?version=7826
200 OK 84 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/landingpage/script.js?version=7826
IP
File type Unicode text, UTF-8 text, with very long lines (65426)
Hash ce3ccb44a305193a7ab00bfdb69b4e23
c33ded560d8928ee37892bcab8398fac77e2ed07
7f2f658ecf4bd097d730ab77a8513fb1b8b6ca6032b919d6abb0e3be6be210c9
GET /js/landingpage/script.js?version=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 83821
date: Wed, 01 Feb 2023 08:21:59 GMT
last-modified: Mon, 15 Aug 2022 09:38:18 GMT
etag: "ce3ccb44a305193a7ab00bfdb69b4e23"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _cxbv_GY-hKP7_OgE9ZRFVxfOM0K7sq0kvdFa7UBNkSvbpa93B4rxA==
age: 223276
vary: Origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-NVWF78EY0E
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-NVWF78EY0E
IP
File type ASCII text, with very long lines (19467)
Hash 17cc8ca5c7c1aeb60bbf4e2c66bec7f0
d443a46823816d54e856ac56e0bf631336bf6882
14288e52aa36740d6e349aa64038c8c8e715b225841f24cca23219da1d5852f9
GET /gtag/js?id=G-NVWF78EY0E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 22:23:14 GMT
expires: Fri, 03 Feb 2023 22:23:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77057
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 22:23:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
media.xn--vtedrmmer-52a7s.com/images/landingpage/lp24/casual.jpg?version=7826
200 OK 109 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/images/landingpage/lp24/casual.jpg?version=7826
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 790x882, components 3\012- data
Size 109 kB (108843 bytes)
Hash 6c1f129b57dd522dd6989fb95a6d992e
aa429ca30de9fae42fb106413307fbb7587b063f
721aa0d4ed39a1a9e393e3995e853c48d0e36168b2dbfdd4cd1c460503e350b9
GET /images/landingpage/lp24/casual.jpg?version=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 108843
date: Wed, 01 Feb 2023 09:14:32 GMT
last-modified: Tue, 18 Aug 2020 08:55:10 GMT
etag: "6c1f129b57dd522dd6989fb95a6d992e"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LIkfH6AjolEluu6-bRc5nx1gbj8V09NndbaMCazaD4J0-xkSom3KNg==
age: 220123
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/project/489/favicon.ico?config=7826
200 OK 4.3 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project/489/favicon.ico?config=7826
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 56283d52626ba639ee4fc7c0a6c84324
b150126aede65c06da7573ac4488ff0043da0431
9b5bd7e7398519bf0f9dd7e52e05194f2f2d64fc549265400484d98e4b6f4281
GET /project/489/favicon.ico?config=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
date: Wed, 01 Feb 2023 08:23:50 GMT
last-modified: Fri, 13 Nov 2020 10:55:42 GMT
etag: "56283d52626ba639ee4fc7c0a6c84324"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zaNPpsagtRsHBqY9anx29HlbPJz75PR3mfyz0_QKVd3cE49zepZJKA==
age: 223165
vary: Origin
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/lp/blank.html
404 Not Found 122 kB URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/blank.html
IP
Size 122 kB (122057 bytes)
Hash c083261316162bbd59c92ea6ff2b59ac
4df68c183f9e02c6c7d1ef3539b6c4a5b648e76e
4a7fead442fdc01917d233f53105a1251a4d8c43ea9c902325100a88da66253a
GET /lp/blank.html HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/lp/lp24
Cookie: PHPSESSID=3bm7seipn9mcndouoiqf0cirbm; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32520325AADA91780B595F9C3B592641F8BB941526A518EB8BDF607BCDCEA6DA03DF1708BB933D9E88C09FD81497215D106A
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Fri, 03 Feb 2023 22:23:14 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Error from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: o-ClOMhRBCPBk3flna_2j1SPOtwf9-uSvqWG_VHUns0wuIfGMzHK9w==
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/manifest/script.js?version=7826
200 OK 757 B URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/manifest/script.js?version=7826
IP
File type ASCII text, with very long lines (1532), with no line terminators
Hash 69b7363b2a1c3b6ca1d79b403e0c6c1c
d369fce98ab7c8750527c5c2f64130dda8729dbf
e6e40f36330091e93b7e5a1661e132f5624d5622ddd56c8941f4027101c36067
GET /js/manifest/script.js?version=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 757
date: Wed, 01 Feb 2023 08:23:48 GMT
last-modified: Thu, 08 Oct 2020 13:26:42 GMT
etag: "69b7363b2a1c3b6ca1d79b403e0c6c1c"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dwyP2PKG3SNscyQcP9fzgnP4l3t0DXtDe_ufL7-yTymwrrMSTNpucQ==
age: 223167
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/vendor/script.js?version=7826
200 OK 236 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/vendor/script.js?version=7826
IP
File type ASCII text, with very long lines (65433)
Size 236 kB (236255 bytes)
Hash f5ef8833e788ec24ffaac4864a1a9fb6
c4fbc75d56f0269014baf42d5de92ce35f9371f9
9947197e08fb77b400bb6e3294799a442828cb004532c9b7d9872bda9ab16cea
GET /js/vendor/script.js?version=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 236255
date: Wed, 01 Feb 2023 08:23:48 GMT
last-modified: Mon, 15 Aug 2022 09:38:09 GMT
etag: "f5ef8833e788ec24ffaac4864a1a9fb6"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OkFGYzOOvdi15xPNhbh_d6t5wVu_fR8IWfCa0CdEEcDxkWfARaViVA==
age: 223167
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/main/script.js?version=7826
200 OK 37 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/main/script.js?version=7826
IP
File type ASCII text, with very long lines (65435)
Hash f1e681a0bb4eb99a76e4fc67ca697e89
c0be4bbc6827461c7b7b4cbf059b160e914fd65a
67e1168eb449f8e436786e6234a78121c4cd500e8b7e445bff775d731a16eeb9
GET /js/main/script.js?version=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36974
date: Wed, 01 Feb 2023 08:23:48 GMT
last-modified: Mon, 15 Aug 2022 09:38:12 GMT
etag: "f1e681a0bb4eb99a76e4fc67ca697e89"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -NLh9ClGhzJcEpgwNj4p6xbFDeWPo1rhHFKK5vyvtubWOKxctXj1Mg==
age: 223167
vary: Origin
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-NVWF78EY0E>m=45je3210&_p=1055741869&cid=1997030293.1675463027&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675463027&sct=1&seg=0&dl=https%3A%2F%2Fwww.xn--vtedrmmer-52a7s.com%2Flp%2Flp24&dt=Hotte%20sexdates%20i%20ditt%20omr%C3%A5de%20-%20v%C3%A5tedr%C3%B8mmer.com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-NVWF78EY0E>m=45je3210&_p=1055741869&cid=1997030293.1675463027&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675463027&sct=1&seg=0&dl=https%3A%2F%2Fwww.xn--vtedrmmer-52a7s.com%2Flp%2Flp24&dt=Hotte%20sexdates%20i%20ditt%20omr%C3%A5de%20-%20v%C3%A5tedr%C3%B8mmer.com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-NVWF78EY0E>m=45je3210&_p=1055741869&cid=1997030293.1675463027&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675463027&sct=1&seg=0&dl=https%3A%2F%2Fwww.xn--vtedrmmer-52a7s.com%2Flp%2Flp24&dt=Hotte%20sexdates%20i%20ditt%20omr%C3%A5de%20-%20v%C3%A5tedr%C3%B8mmer.com&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.xn--vtedrmmer-52a7s.com
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.xn--vtedrmmer-52a7s.com
date: Fri, 03 Feb 2023 22:23:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 03:08:32 GMT
age: 69288
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/project//logo_dark.png?config=7826
403 Forbidden 0 B URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project//logo_dark.png?config=7826
IP
GET /project//logo_dark.png?config=7826 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 03 Feb 2023 22:23:13 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qhoCuDaW2ITm-j_GN6NETkyIZZc0_3QiPWc-LEhYZDZUL8FQtuhsng==
vary: Origin
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/lp/blank.html?HistoryLoad
404 Not Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/blank.html?HistoryLoad
IP
GET /lp/blank.html?HistoryLoad HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/lp/lp24
Cookie: PHPSESSID=3bm7seipn9mcndouoiqf0cirbm; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32520325AADA91780B595F9C3B592641F8BB941526A518EB8BDF607BCDCEA6DA03DF1708BB933D9E88C09FD81497215D106A; cookies_marketing=1; cookies_analytic=1; _ga_NVWF78EY0E=GS1.1.1675463027.1.1.1675463027.0.0.0; _ga=GA1.1.1997030293.1675463027
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Fri, 03 Feb 2023 22:23:15 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Error from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q-IZJosnnUco6tCW0a4BdEgiBBw7_B20AKfy9qnGgcoqjuyy624eyg==
X-Firefox-Spdy: h2
18.192.108.151
3.248.18.157
216.239.34.36
23.36.77.32