www.sexybltch.net/c/4c8a669b83e6c2d3?&click_id=eqoff61b5fffc00070ba3&s1=50228&s2=1359515&s3=backuser&s5=&lp=MJ&j4=&j5=1&j6=1&j8=&j9=
302 Found 127 B URL HTTP/1.1 www.sexybltch.net/c/4c8a669b83e6c2d3?&click_id=eqoff61b5fffc00070ba3&s1=50228&s2=1359515&s3=backuser&s5=&lp=MJ&j4=&j5=1&j6=1&j8=&j9=
IP
File type HTML document, ASCII text
Hash 2175de30ebc27075293aa56ac9d9e1a0
44450749d994269eb995d61e93be7081b7375135
98e656e4665e6720cfbf6256ecd95845f05e32e8be765db744282770c264a00e
GET /c/4c8a669b83e6c2d3?&click_id=eqoff61b5fffc00070ba3&s1=50228&s2=1359515&s3=backuser&s5=&lp=MJ&j4=&j5=1&j6=1&j8=&j9= HTTP/1.1
Host: www.sexybltch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 05 Feb 2023 23:35:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 127
Connection: keep-alive
Location: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
Set-Cookie: unique_id=63e03d3a000ee90d; Path=/; Expires=Thu, 06 Apr 2023 23:35:22 GMT
unique_id2=63e03d3a000bba03; Path=/; Expires=Sat, 06 May 2023 23:35:22 GMT
63e03d3a000bba03_c=1; Path=/; Expires=Sat, 06 May 2023 23:35:22 GMT
ref_token=50228; Path=/; Expires=Tue, 07 Mar 2023 23:35:22 GMT
impression=; Path=/; Expires=Sun, 05 Feb 2023 23:35:22 GMT
tid=dbcew63e03d3a000476ce; Path=/; Expires=Mon, 10 Jan 2028 23:35:22 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10227
Expires: Mon, 06 Feb 2023 02:25:49 GMT
Date: Sun, 05 Feb 2023 23:35:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7909
Expires: Mon, 06 Feb 2023 01:47:11 GMT
Date: Sun, 05 Feb 2023 23:35:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14044
Expires: Mon, 06 Feb 2023 03:29:26 GMT
Date: Sun, 05 Feb 2023 23:35:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 23:33:59 GMT
content-type: application/json
age: 83
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +PIcoP8TQguOv6sXQWIsqk9mhEgVQgi9EVLOvQsYbxCvvHRABtuzpLiVdn9hZuBjoKsYZmUOPO8=
x-amz-request-id: PP7VZ260HQM9FEY3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 22:53:28 GMT
age: 2514
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 23:35:22 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dcc27e541ec318aa52a87efc0a748e89
0fa57eaa99ad8180ccb601715e9fd2452735892a
673ec79801d94368bfdd34afa5e43d90de4975e95e3baa3496ae3a104f51d01e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EC79801D94368BFDD34AFA5E43D90DE4975E95E3BAA3496AE3A104F51D01E"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17054
Expires: Mon, 06 Feb 2023 04:19:36 GMT
Date: Sun, 05 Feb 2023 23:35:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 23:07:20 GMT
age: 1682
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12710
Expires: Mon, 06 Feb 2023 03:07:13 GMT
Date: Sun, 05 Feb 2023 23:35:23 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 19CKa86ZqIQKsPQsRTIoKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Xz/gUXgRNVfGyr3qLVjGN4buroA=
go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
200 OK 569 B URL HTTP/1.1 go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (446)
Hash ccf0e2dff3d2a08ebdc477921bde0d56
ac0fdede2a70dbe6c06f5c0c4ee7f75f06424250
4ff283dca7b9e70136913ff1ee2e7ce73b349a4ac7532c758a99cd701c7aa07e
GET /go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
date: Sun, 05 Feb 2023 23:35:22 GMT
server: Apache
set-cookie: bd_ovtu=1; expires=Mon, 06-Feb-2023 23:35:23 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
bdreff=NONE; expires=Fri, 04-Aug-2023 23:35:23 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
tour=49866; expires=Fri, 04-Aug-2023 23:35:23 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
affsubid=142802-50228; expires=Fri, 04-Aug-2023 23:35:23 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
bdvisit=142802; expires=Mon, 06-Feb-2023 23:35:23 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
bdcounter=1; expires=Mon, 06-Feb-2023 23:35:23 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
xk=d0b1b0457a075372dc120cdac36b037d; expires=Fri, 04-Aug-2023 23:35:23 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
vary: Accept-Encoding
content-encoding: gzip
content-length: 569
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
go.cindy-bangs.com/native.history.js
200 OK 6.5 kB URL HTTP/1.1 go.cindy-bangs.com/native.history.js
IP
File type ASCII text, with very long lines (22102), with no line terminators
Hash 8353bbacfdb868f80448dcdb30c2e2d2
7232562be4f0f7a1aaa403c9d6c5d2ed17345cfd
fd7be3058aae52c67b43703962b3b6039b0ac2709a82a68a150aebae3e19ae38
Analyzer Verdict Alert fortinet Phishing
GET /native.history.js HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-50228; bdvisit=142802; bdcounter=1; xk=d0b1b0457a075372dc120cdac36b037d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 05 Feb 2023 23:35:23 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
content-length: 6519
x-content-type-options: nosniff
go.cindy-bangs.com/go.min.js
200 OK 221 B URL HTTP/1.1 go.cindy-bangs.com/go.min.js
IP
File type ASCII text, with very long lines (305)
Hash 77d3c60f4f2cc6ab7f7c0f9187dfd6fe
7a8ce851238850aeadfb637638c52891aeb53c42
98de9958ac1d81fdeea1f165dfe95f2da4d7e592f452d7c8ca699a1c914e3f2e
Analyzer Verdict Alert fortinet Phishing
GET /go.min.js HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-50228; bdvisit=142802; bdcounter=1; xk=d0b1b0457a075372dc120cdac36b037d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 05 Feb 2023 23:35:23 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
content-length: 221
x-content-type-options: nosniff
go.cindy-bangs.com/favicon.ico
200 OK 198 B URL HTTP/1.1 go.cindy-bangs.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 2 colors\012- data
Hash c6acedaff906029fc5455d9ec52c7f42
92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81
9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b
GET /favicon.ico HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-50228; bdvisit=142802; bdcounter=1; xk=d0b1b0457a075372dc120cdac36b037d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
server: Apache
last-modified: Fri, 03 Feb 2023 11:24:18 GMT
etag: "c6-5f3c9ec1f1d60"
accept-ranges: bytes
content-length: 198
content-type: image/vnd.microsoft.icon
x-content-type-options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11708
Expires: Mon, 06 Feb 2023 02:50:32 GMT
Date: Sun, 05 Feb 2023 23:35:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11708
Expires: Mon, 06 Feb 2023 02:50:32 GMT
Date: Sun, 05 Feb 2023 23:35:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11708
Expires: Mon, 06 Feb 2023 02:50:32 GMT
Date: Sun, 05 Feb 2023 23:35:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 336b665bfad04ec8ed14b01bbf17566d
92102d4c75d2c7efd8197be88e3cb467d2682190
1e21687a242c058a3b442909b168c5e706175b1e93e51cfce691c6f033f795d7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe482817c-a09c-4952-a819-3ff2f99810ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8039
x-amzn-requestid: b36a6062-0676-4abc-820c-959bc02810f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4pkoECwIAMF4hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e022ea-52faddc079b7107004e8cfea;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:43:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MOgI0aopvRaUSJ-YFH6QFNpGxhUNlpnLk7VeCeOsmcrGTUYIESN2Hg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:04:24 GMT
age: 5460
etag: "92102d4c75d2c7efd8197be88e3cb467d2682190"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d7cf8da-65c4-43dc-af2a-18f03b8da137.jpeg
200 OK 2.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d7cf8da-65c4-43dc-af2a-18f03b8da137.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac3c07c326869964cf6a5ddb153d9587
dcf6f03648c20c9c5c0d6688c766d7e2f943b4cb
55548e23c11dfcd8ef3a5a4e000c041c1b6cfe423f4aed0df6fbb23dbed5f337
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d7cf8da-65c4-43dc-af2a-18f03b8da137.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2443
x-amzn-requestid: 9286f232-d186-458a-b956-fc919f1baf89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4pDxEcWIAMFhOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02217-473937042af885b73a64632f;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:39:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AysPcQKKPCBmnBiZlH8u_Zv62m8TuhJXwzjgIokCmaq-J_LfaeBicA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:53:56 GMT
etag: "dcf6f03648c20c9c5c0d6688c766d7e2f943b4cb"
content-type: image/jpeg
age: 6088
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e717762-1012-4c44-9171-7c40ae8127ca.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e717762-1012-4c44-9171-7c40ae8127ca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c145b7d4f95cca98f9b942a291c9d60
967e1da2df2ce864b1c67e28099c8b161810e240
01f3a9d99b735eb512dd8a251b926eccb05a960e03056fe0a50d4bad7fc4b5b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e717762-1012-4c44-9171-7c40ae8127ca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6116
x-amzn-requestid: d6d032ad-c788-4b63-aab5-fdb9f110f86a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4okcGmOoAMFp-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0214f-172d50bc478a1fac5d4442cd;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2Hl7AlAxp405wt3wk8fRiEr3xMyslJjpKXgSlyU8Hvv23HogWQFvUg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:09 GMT
age: 6255
etag: "967e1da2df2ce864b1c67e28099c8b161810e240"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f54c8725e5dab88b12d42876fa61b12
89c734d690981e30f9d566a7763a1870724d65aa
b8cc5148ae01e1a1fe32f56bdce71de086da320cdd8a55a746609c9773fdaf77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9809
x-amzn-requestid: 533de5fa-8173-430e-a657-4386728723eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc-VEGbIAMFSmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0ec1-4e160c5c2a46d2913cc8e71e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BgSfqU3WmIhR8N86AEfaU7pXN7jIKs_lKJVD6yCSaJBl5AVx13e5hw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:54:03 GMT
etag: "89c734d690981e30f9d566a7763a1870724d65aa"
content-type: image/jpeg
age: 6081
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a24cf7b2db6d65c3fe5daf78b3309ced
a3653a9a7baea412808dd91572ff21e1a505c26f
f55ee98bab5ce53d6acc1cac7f54f089b42d5f2ffbe750d869c4f4a7bc26f715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13230
x-amzn-requestid: 8171829a-cf6d-4c33-99a1-f3cef7cd4475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiTH8GoAMFYLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1597a0f06ef3db2534a101aa;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Nvfp0sEYw5bxnFHisq80WCXh6T-LdFlPqs95tyX2epjMfhM_hjUj0A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 6321
etag: "a3653a9a7baea412808dd91572ff21e1a505c26f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 6321
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d0b1c2a209b087df089110d188f4a2fe
1463a14fdb324d6b10863e489c24f7b5e0fefab9
64bd35284f54c9ccbda1f86b82055416289ebead76038886b079e4553d97274a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 23:35:24 GMT
Etag: "63df624a-1d7"
Last-Modified: Sun, 05 Feb 2023 23:03:15 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 d71a7f4027481327b033ea7bb8ffab7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN56-P1
X-Amz-Cf-Id: VxquZ4-EdHZxngnG_XhqVwJkEXTEYuRHcHpI3GE2Ps4VLRwZLpSm3w==
Age: 1929
secure.cmvrclicks000.com/track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869
302 Found 0 B URL HTTP/2 secure.cmvrclicks000.com/track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869 HTTP/1.1
Host: secure.cmvrclicks000.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
set-cookie: AWSALB=sPBUwg1UC/6kdBMpZ+NAJeEzdPA2/puGB9KSysyTe11RGMXmH4L+46My46mRal8jVIc01N7s1jMMk7Q3D4dTZzszY3U9ZKmdenYx1eQcULc/5zhOGa8Lqf/VmYIN; Expires=Sun, 12 Feb 2023 23:35:24 GMT; Path=/
AWSALBCORS=sPBUwg1UC/6kdBMpZ+NAJeEzdPA2/puGB9KSysyTe11RGMXmH4L+46My46mRal8jVIc01N7s1jMMk7Q3D4dTZzszY3U9ZKmdenYx1eQcULc/5zhOGa8Lqf/VmYIN; Expires=Sun, 12 Feb 2023 23:35:24 GMT; Path=/; SameSite=None; Secure
PHPSESSID=1uhsvc66kvqdkos85cv5cgv695; path=/
offerit_unique_344_304_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=86400; Expires=Monday, 06 Feb 2023 23:35:24 UTC; path=/; domain=cmvrclicks000.com
ocode_344_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=2592000; Expires=Tuesday, 07 Mar 2023 23:35:24 UTC; path=/; domain=cmvrclicks000.com
ocode_344=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=2592000; Expires=Tuesday, 07 Mar 2023 23:35:24 UTC; path=/; domain=cmvrclicks000.com
offerit_344_960_cookie=https%3A%2F%2Fgo.cindy-bangs.com%2F; Max-Age=2592000; Expires=Tuesday, 07 Mar 2023 23:35:24 UTC; path=/; domain=cmvrclicks000.com
offerit_344_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA|||763e03d3cb1acf4.21662155; Max-Age=2592000; Expires=Tuesday, 07 Mar 2023 23:35:24 UTC; path=/; domain=cmvrclicks000.com
server: Apache/2.4.54 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/main.css
200 OK 2.5 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/main.css
IP
ASN #60068 Datacamp Limited
Hash a5c213f3bbcefe47b9d4770545218f18
6ae32532f35bb3a7e4e4976cddc07a568d5e3c4f
d22b29337aacfa856ddb541d9caf5545f6a1ce381f7ab76afdd7bfb2778eb1d2
GET /lander/sk_version1_no_trial_na/assets/css/main.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: text/css
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-1c00"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhHwVS//ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063738f3f3a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/devices-320x182.png
200 OK 71 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/devices-320x182.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 320 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fd5b4ca3cabbdd5e8659c27234986e9
77157492a9b87e90bccffe986ae241e325cdedaf
6d7f381516d512b6647e1a7c3dd3ad5776758ca40fcbc1802e037d6ac8568f58
GET /lander/sk_version1_no_trial_na/img/devices-320x182.png HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: image/png
content-length: 71017
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: "63b5b291-11569"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhEPIEX/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de0636dac0d00
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito|Roboto
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Nunito|Roboto
IP
Hash deead4230cc67f41ef3336d205eab6ac
bde2fb09e2cef34cac6cb21790daf719a8cd3d95
34b5539d91743dd32cfe6ddde7e912be5d08cf481fc1cdb3b265b922134e7ac5
GET /css?family=Nunito|Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 23:35:25 GMT
date: Sun, 05 Feb 2023 23:35:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
200 OK 34 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
IP
ASN #60068 Datacamp Limited
Hash ca95f0d8db5a965ab78dd272a8d7c0ff
ae61c8c0358d8998d50b34b0c3707e2e10cd4549
160df5c64dd3149845e4e3668662b8a37b91a5a6823c1a2aec869ddf810765a0
GET /lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.cindy-bangs.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: text/html
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-362b"
access-control-allow-origin: *
x-accel-expires: @1676049825
server: CDN77-Turbo
x-77-nzt: AcO1qhFcf6j/m5EJAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063eb776e35
x-cache: HIT
x-age: 627099
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/loader.css
200 OK 205 kB URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/loader.css
IP
ASN #60068 Datacamp Limited
Size 205 kB (205420 bytes)
Hash e37a5f7973dd031244ba69dd1a276b58
53ca26c981532c3c6f7dc87c44074ae1f97bce1a
d30f856ad6ece4d5d51e1a488fd53738a109a4c36b43f849b81fbfce215a10bf
GET /_fuckbook/loader.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: text/css
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-2ba"
access-control-allow-origin: *
x-accel-expires: @1675963085
server: CDN77-Turbo
x-77-nzt: AcO1qhF81Af/b+QKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063f6a6a23a
x-cache: HIT
x-age: 713839
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/logo.svg
200 OK 83 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/logo.svg
IP
ASN #60068 Datacamp Limited
Hash a9d6e6832ab6da4ea99590f1f78f5a0a
f874a524f60584f5dc294c37416cfb5cb0024a7f
7c6ca7b4395e91b4ebc4a3a69ac81482c4ae681ea5a9497529d3a2b1f9b2a40d
GET /lander/sk_version1_no_trial_na/img/logo.svg HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: image/svg+xml
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-2cc9"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhFR+Wr/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de063ed400300
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/ff_actions.js
200 OK 2.2 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/ff_actions.js
IP
ASN #60068 Datacamp Limited
Hash 2a29fe67a02827088cd87cfca4f7751d
925b8a08def9deeb85411ec9f192b0c84ce9f10c
737a14f02d578936963b73649cdfcf56101c276c44edbb12ef51d38a3757b774
GET /lander/sk_version1_no_trial_na/assets/js/ff_actions.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-183d"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhHIMq7/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063ebdaf03a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 23:35:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hello.fuckbookmobile.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 22:02:00 GMT
expires: Mon, 05 Feb 2024 22:02:00 GMT
cache-control: public, max-age=31536000
age: 5605
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 23:35:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTA3j77e.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTA3j77e.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7780, version 1.0\012- data
Hash 798821867175699e0b60180cf4ff943b
074c3f576fc33caa6b9c348a00a0c2d04a9ed9c2
ce5142e318d3a78cefd972ab3c193ddef367fd09c33cf4943363ea1f6e5ee1d8
GET /s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTA3j77e.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hello.fuckbookmobile.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:18:39 GMT
expires: Sat, 03 Feb 2024 02:18:39 GMT
cache-control: public, max-age=31536000
age: 249406
last-modified: Mon, 18 Jul 2022 19:35:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14060, version 1.0\012- data
Hash aacf0f4f8b5d693087b4d8ac6c86d2ae
ad06f3ffd0db6034eb0a12f98aa8aa4dead430fb
5e2f97ea0fb92d5e3ae31eeef403b9c34363c8fb2a387e13cf381fa97f3e8cf7
GET /s/nunito/v25/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hello.fuckbookmobile.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14060
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 15:38:58 GMT
expires: Tue, 30 Jan 2024 15:38:58 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:44:57 GMT
content-type: font/woff2
age: 546987
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js
200 OK 8.7 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js
IP
ASN #60068 Datacamp Limited
Hash 254d2d70fa8eb7a8867df09a3a21304c
6f4e2209338d4d1c242985d820808ddc68f96033
2c4d0d42b80aa947b850e44957f32c2902bc06589fc8f4ba149735e6e9edb4a5
GET /lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-614f"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhGFUGz/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063a327d53a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/favicon.png
200 OK 5.5 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/favicon.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7aa82907f14594b39d542a8c2c712b75
04b579e833a108940f7bf0dbc0c60eeccb67d88a
52abce52b791723efcaac09b21381e5727332fe2c5c9d62e4e7b807633e09372
GET /lander/sk_version1_no_trial_na/img/favicon.png HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:25 GMT
content-type: image/png
content-length: 5506
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: "63b5b291-1582"
access-control-allow-origin: *
x-accel-expires: @1675993461
server: CDN77-Turbo
x-77-nzt: AcO1qhG6+Cf/yG0KAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de063c7dd140e
x-cache: HIT
x-age: 683464
x-77-pop: frankfurtDE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_scripts/close-button-redirect.js
200 OK 857 B URL HTTP/2 hello.fuckbookmobile.com/_scripts/close-button-redirect.js
IP
ASN #60068 Datacamp Limited
Hash 1f2388c6769af92628db42e5c2c950a1
8cae8f710e3dfd82365a48b7b66b53dc1252c35e
27b9bb06068f6145f46c322eda791491ac5e0d072c521237c75d09ef0d131764
GET /_scripts/close-button-redirect.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-269"
access-control-allow-origin: *
x-accel-expires: @1675963196
server: CDN77-Turbo
x-77-nzt: AcO1qhFhw5P/AOQKAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de0633f562500
x-cache: HIT
x-age: 713728
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 05 Feb 2023 21:44:08 GMT
expires: Sun, 05 Feb 2023 23:44:08 GMT
cache-control: public, max-age=7200
age: 6677
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 23:35:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j99&aip=1&a=1076001007&t=pageview&_s=1&dl=https%3A%2F%2Fhello.fuckbookmobile.com%2Flander%2Fsk_version1_no_trial_na%2F%3Faf%3D231%26af_source%3Dofferit%26oid%3D763e03d3cb1acf4.21662155%26utm_source%3D231%26utm_medium%3Dfbpps%26utm_content%3Dhome%26utm_campaign%3Dcummission%26_ocid%3D%257C142802_49866_50228%26subaff%3D142802%26xk%3Dd0b1b0457a075372dc120cdac36b037d%26bn%3D38%26gu%3Dhttp%253A%252F%252Fgo.cindy-bangs.com%252Fgo.php%26t%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26clickid%3Ddbcew63e03d3a000476ce%26i18n_country%3DNO%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26ocode%3DMjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA&dr=https%3A%2F%2Fgo.cindy-bangs.com%2F&ul=en-us&de=UTF-8&dt=Fuckbook%20-%20S%C3%B8ker%20du%20etter%20nytelse%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=976071395&gjid=1905789193&cid=1841808190.1675640168&tid=UA-1769378-8&_gid=344473060.1675640168&_r=1&_slc=1&z=1500913892
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&aip=1&a=1076001007&t=pageview&_s=1&dl=https%3A%2F%2Fhello.fuckbookmobile.com%2Flander%2Fsk_version1_no_trial_na%2F%3Faf%3D231%26af_source%3Dofferit%26oid%3D763e03d3cb1acf4.21662155%26utm_source%3D231%26utm_medium%3Dfbpps%26utm_content%3Dhome%26utm_campaign%3Dcummission%26_ocid%3D%257C142802_49866_50228%26subaff%3D142802%26xk%3Dd0b1b0457a075372dc120cdac36b037d%26bn%3D38%26gu%3Dhttp%253A%252F%252Fgo.cindy-bangs.com%252Fgo.php%26t%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26clickid%3Ddbcew63e03d3a000476ce%26i18n_country%3DNO%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26ocode%3DMjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA&dr=https%3A%2F%2Fgo.cindy-bangs.com%2F&ul=en-us&de=UTF-8&dt=Fuckbook%20-%20S%C3%B8ker%20du%20etter%20nytelse%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=976071395&gjid=1905789193&cid=1841808190.1675640168&tid=UA-1769378-8&_gid=344473060.1675640168&_r=1&_slc=1&z=1500913892
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&aip=1&a=1076001007&t=pageview&_s=1&dl=https%3A%2F%2Fhello.fuckbookmobile.com%2Flander%2Fsk_version1_no_trial_na%2F%3Faf%3D231%26af_source%3Dofferit%26oid%3D763e03d3cb1acf4.21662155%26utm_source%3D231%26utm_medium%3Dfbpps%26utm_content%3Dhome%26utm_campaign%3Dcummission%26_ocid%3D%257C142802_49866_50228%26subaff%3D142802%26xk%3Dd0b1b0457a075372dc120cdac36b037d%26bn%3D38%26gu%3Dhttp%253A%252F%252Fgo.cindy-bangs.com%252Fgo.php%26t%3D51568%26aid%3D142802%26sid%3D50228%26clickid%3Ddbcew63e03d3a000476ce%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26clickid%3Ddbcew63e03d3a000476ce%26i18n_country%3DNO%26hts_id%3D29534b11-230b-41d8-a310-3743c2162869%26ocode%3DMjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA&dr=https%3A%2F%2Fgo.cindy-bangs.com%2F&ul=en-us&de=UTF-8&dt=Fuckbook%20-%20S%C3%B8ker%20du%20etter%20nytelse%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=976071395&gjid=1905789193&cid=1841808190.1675640168&tid=UA-1769378-8&_gid=344473060.1675640168&_r=1&_slc=1&z=1500913892 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://hello.fuckbookmobile.com
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://hello.fuckbookmobile.com
date: Sun, 05 Feb 2023 23:35:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F028c7ce9-e4c6-4453-bc20-0c0fefbadfec.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F028c7ce9-e4c6-4453-bc20-0c0fefbadfec.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b08a4dc42d2e08b2b18c9545ce9a2fdb
b688557ebba4b3c987275761e9a1f5993ad3d8a5
641402fb9282208b33877e4812cb9392b035dba85fcb3a344a2a1072d5a69f28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F028c7ce9-e4c6-4453-bc20-0c0fefbadfec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11630
x-amzn-requestid: 3912e3f9-44a5-405c-9edb-d8409faa0b04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4pkUHUoIAMFzcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e022e8-03e547e96b085d9e29a1852b;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:43:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Vrf1axqufJTrf057F6nY_97NtiM_Wt0tZXpTGN42rvAOV7a4CPe1ig==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:12:02 GMT
age: 5009
etag: "b688557ebba4b3c987275761e9a1f5993ad3d8a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-8a1"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhHyBV7/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063fa12f93a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/Config-fuckbook_trial.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/Config-fuckbook_trial.js
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/Config-fuckbook_trial.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:11 GMT
etag: W/"63b5ad17-73"
access-control-allow-origin: *
x-accel-expires: @1675963847
server: CDN77-Turbo
x-77-nzt: AcO1qhF3uc7/deEKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de06316e4fe3a
x-cache: HIT
x-age: 713077
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/Api.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/Api.js
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/Api.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:11 GMT
etag: W/"63b5ad17-4cf"
access-control-allow-origin: *
x-accel-expires: @1675963086
server: CDN77-Turbo
x-77-nzt: AcO1qhHWDQb/buQKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063943b943b
x-cache: HIT
x-age: 713838
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/promise.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/promise.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/promise.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-185b"
access-control-allow-origin: *
x-accel-expires: @1675963086
server: CDN77-Turbo
x-77-nzt: AcO1qhEnUR7/buQKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063cfca963b
x-cache: HIT
x-age: 713838
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/fetch.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/fetch.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/fetch.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-32d4"
access-control-allow-origin: *
x-accel-expires: @1675963086
server: CDN77-Turbo
x-77-nzt: AcO1qhGUsX3/buQKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de0636828993b
x-cache: HIT
x-age: 713838
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/universalPS.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/universalPS.js
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/js/universalPS.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-3f26"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhG4/3j/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063c367e33a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: text/css
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-22682"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhF0Xif/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de06374f96e3a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/CommonMapper.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/CommonMapper.js
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/CommonMapper.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:11 GMT
etag: W/"63b5ad17-185"
access-control-allow-origin: *
x-accel-expires: @1675963086
server: CDN77-Turbo
x-77-nzt: AcO1qhFAfk3/buQKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de0634d3c913b
x-cache: HIT
x-age: 713838
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_webpack/bundle.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_webpack/bundle.js
IP
ASN #60068 Datacamp Limited
GET /_webpack/bundle.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-25bd"
access-control-allow-origin: *
x-accel-expires: @1675963086
server: CDN77-Turbo
x-77-nzt: AcO1qhGsWFP/buQKAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de063a18c8e3b
x-cache: HIT
x-age: 713838
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/ga.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/ga.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/ga.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-19e"
access-control-allow-origin: *
x-accel-expires: @1675963085
server: CDN77-Turbo
x-77-nzt: AcO1qhE9liL/b+QKAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de0639d0c0100
x-cache: HIT
x-age: 713839
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_scripts/general.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_scripts/general.js
IP
ASN #60068 Datacamp Limited
GET /_scripts/general.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 16:45:12 GMT
etag: W/"63b5ad18-308"
access-control-allow-origin: *
x-accel-expires: @1675963196
server: CDN77-Turbo
x-77-nzt: AcO1qhG6imb/AOQKAA
x-77-nzt-ray: 4c156224a35cb1bb3d3de06368d52200
x-cache: HIT
x-age: 713728
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/popwin.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/popwin.js
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/js/popwin.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=763e03d3cb1acf4.21662155&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_50228&subaff=142802&xk=d0b1b0457a075372dc120cdac36b037d&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=50228&clickid=dbcew63e03d3a000476ce&hts_id=29534b11-230b-41d8-a310-3743c2162869&clickid=dbcew63e03d3a000476ce&i18n_country=NO&hts_id=29534b11-230b-41d8-a310-3743c2162869&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 23:35:24 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 04 Jan 2023 17:08:33 GMT
etag: W/"63b5b291-7f1"
access-control-allow-origin: *
x-accel-expires: @1676107580
server: CDN77-Turbo
x-77-nzt: AcO1qhF0du7/ALAIAA
x-77-nzt-ray: 4c156224a35cb1bb3c3de0631b35cf3a
x-cache: HIT
x-age: 569344
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
52.19.101.114
52.89.71.191
23.36.76.226
195.181.170.18
0.0.0.0