| a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=95&affiliateID=75077&source=102f187085a866b2029a7e7053f859&subID2=55609&target=&Site=&Bnr=ALGO&cid=wthr3ncimr2chksk2tb2ck3c&affsource=95 |  18.192.108.151 | 302 | 0 B |
URL HTTP/1.1a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=95&affiliateID=75077&source=102f187085a866b2029a7e7053f859&subID2=55609&target=&Site=&Bnr=ALGO&cid=wthr3ncimr2chksk2tb2ck3c&affsource=95 IP18.192.108.151:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=95&affiliateID=75077&source=102f187085a866b2029a7e7053f859&subID2=55609&target=&Site=&Bnr=ALGO&cid=wthr3ncimr2chksk2tb2ck3c&affsource=95 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 02 Dec 2022 04:11:57 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://t.anmdr.link/75077/3785/26412/?aff_sub4=_bucket&aff_sub=95&aff_sub2=55609&aff_sub3=wcor9nf0pofm3kski3plq0g2&source=102f187085a866b2029a7e7053f859&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756
Pragma: no-cache
Set-Cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=TgSCd5laYRBvCQHYdt9xyRJfiPLk9ltbHZbChcNFYqw; Max-Age=86400; Expires=Sat, 03-Dec-2022 04:11:57 GMT; Domain=a.vfgtc.com; Path=/; HttpOnly
cc-v4=WHP22fNNbJUJzllMhNcFWImMGrXAu06maFY2OL%2F8xXq5oGIqE2%2BEQAyrHQn7iOUNYPQYdhS3oYKRcg3kUwqxXRqSdF2%2FHLSE4PLpBWOarGotEp%2FRz5Rc%2Fg0WDsv72kTPXEegndREhez6BPRgutDYrA%3D%3D; Max-Age=31536000; Expires=Sat, 02-Dec-2023 04:11:57 GMT; Domain=a.vfgtc.com; Path=/; HttpOnly
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0c748388899e8a8d3680355da2ea5020 903c620cd137613daafb0da0508c37b2f4a67212 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 601
Cache-Control: max-age=109756
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:57 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:41:13 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3bbb845b153026fc5332dd4506585b57 3cad200fac28fd00f34ce6ef79373e661e188743 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3133
Expires: Fri, 02 Dec 2022 05:04:11 GMT
Date: Fri, 02 Dec 2022 04:11:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash55b4c61a1e99001307750e3647fe1102 7559f9f6770b7d3f45b723167062096312641e08 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13192
Expires: Fri, 02 Dec 2022 07:51:50 GMT
Date: Fri, 02 Dec 2022 04:11:58 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 03:19:50 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3128
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9SMqK6DB4xTkq4UEa2FdhPhHmUKGTbHIho58DhKgnOn0eQLg93EBoKG3KJomUieMl5yccedbgkA=
x-amz-request-id: BASM3M0K21NCVT7Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 03:45:57 GMT
age: 1561
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.118 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.118:0
Hash6980f9e96fb83e1655092dda5660940f 7bdeb733a4606ae97e209dadc851818c1e3f39dc 2cc1c7f2813c3427980f9dcb848415861b55b6a53f5f287721fbb8a8edb99dc1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140778
Date: Fri, 02 Dec 2022 04:11:58 GMT
Etag: "6388fcd2-1d7"
Expires: Sat, 03 Dec 2022 19:18:17 GMT
Last-Modified: Thu, 01 Dec 2022 19:13:22 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ql-1UKZJUPaKIhecek_mpQmlSzVztX4LR6JGNvaQ4IcoBbUvRAenwA==
Age: 294
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:11:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 04:11:15 GMT
cache-control: public,max-age=3600
age: 43
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| t.anmdr.link/75077/3785/26412/?aff_sub4=_bucket&aff_sub=95&aff_sub2=55609&aff_sub3=wcor9nf0pofm3kski3plq0g2&source=102f187085a866b2029a7e7053f859&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756 | 54.230.111.117 | 303 See Other | 1.0 kB |
URL HTTP/2t.anmdr.link/75077/3785/26412/?aff_sub4=_bucket&aff_sub=95&aff_sub2=55609&aff_sub3=wcor9nf0pofm3kski3plq0g2&source=102f187085a866b2029a7e7053f859&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756 IP54.230.111.117:0
File typeHTML document, ASCII text, with very long lines (1020), with no line terminators Hash1f4694e47d4d84e80ff5b05556cc4fed b3e775d0ae57f6d7a9b8ad7cdda83ba0fcc1de72 76c1af593c82eaddebe4c1909cc8e50dfae67b74c7c0977b32cf7b20ea63de16
GET /75077/3785/26412/?aff_sub4=_bucket&aff_sub=95&aff_sub2=55609&aff_sub3=wcor9nf0pofm3kski3plq0g2&source=102f187085a866b2029a7e7053f859&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756 HTTP/1.1
Host: t.anmdr.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 1020
location: https://a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=44542&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&s2=102785f5b0a72d1368f6c8ac2fc31f&s3=95%3B102f187085a866b2029a7e7053f859&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=95&affsource=95&aff_click_id=102785f5b0a72d1368f6c8ac2fc31f&affsource=102f187085a866b2029a7e7053f859&bo=2753%2C2754%2C2755%2C2756
server: nginx/1.19.0
date: Fri, 02 Dec 2022 04:11:58 GMT
set-cookie: aff_ran_url_3785=26412; Path=/; Expires=Sat, 03 Dec 2022 04:11:58 GMT; Secure
enc_aff_session_3785=ENC038a2027c940be68054dcca3532ee16526f24f13ccfe10eb5d0d6794ca0c8252dafe031e85497b0702cd7ed52816972ddab08041b763b326cb78d6df2f6642df6fa973ee6ea6a407f9b7b3044ce95dc67e2707e1dad6aeddf4dfbdfd9d1b8cce62a6d5fd4c21867d5bc608e74bfca93a43115b2c0838781f467aeb05088a0a1feabfcdebb6d1b913515ba906cd9fdef52d187f412efa3a3cf248f4cc78b12c8004b51e40b0a246fb2de5d694b4d2a62e0b009e8d4354a7a8365cc1a0fce12a5425171f039d; Path=/; Expires=Sun, 01 Dec 2024 04:11:58 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Sun, 26 Oct 2025 14:51:58 GMT; Secure
tracking_id: 102785f5b0a72d1368f6c8ac2fc31f
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6F2TdcSuvNmL56qneLFYn4s_cy7iZgafyG2olNFwKp2pbkSuOGXwpQ==
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash1f88399f3fdd89dbb9ca1229cb67143a 325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 594
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:58 GMT
Last-Modified: Fri, 02 Dec 2022 04:02:04 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=44542&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&s2=102785f5b0a72d1368f6c8ac2fc31f&s3=95%3B102f187085a866b2029a7e7053f859&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=95&affsource=95&aff_click_id=102785f5b0a72d1368f6c8ac2fc31f&affsource=102f187085a866b2029a7e7053f859&bo=2753%2C2754%2C2755%2C2756 | 18.192.108.151 | 302 Found | 0 B |
URL HTTP/2a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=44542&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&s2=102785f5b0a72d1368f6c8ac2fc31f&s3=95%3B102f187085a866b2029a7e7053f859&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=95&affsource=95&aff_click_id=102785f5b0a72d1368f6c8ac2fc31f&affsource=102f187085a866b2029a7e7053f859&bo=2753%2C2754%2C2755%2C2756 IP18.192.108.151:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ab267e05-23a0-430a-bac4-772f7f629740?subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=44542&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&s2=102785f5b0a72d1368f6c8ac2fc31f&s3=95%3B102f187085a866b2029a7e7053f859&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=95&affsource=95&aff_click_id=102785f5b0a72d1368f6c8ac2fc31f&affsource=102f187085a866b2029a7e7053f859&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1
Host: a.vfgtf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 02 Dec 2022 04:11:58 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=170910&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wjdvj034dobg5ksk2obqfmb6&affsource=95
pragma: no-cache
set-cookie: ab267e05-23a0-430a-bac4-772f7f629740-v4=IBpurp8hQe1tlkpHzDh16wDrUigwDfJXc28lAve1TIE; Max-Age=86400; Expires=Sat, 03-Dec-2022 04:11:58 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=sL4DBu9%2BjVX91GRRoQsnA22FW%2FR2C6g6g0b46AtSHbfL2XcsdNx9VMGgMJ1%2BiJ9OzAQOEEcAiaC74DAsO5y6AEcp3UD2ITxvAVdUXnW30IqFJ0rAYy25AsKRbQ4jM6yDIicoL1xD7MEjKVni6gVzUg%3D%3D; Max-Age=31536000; Expires=Sat, 02-Dec-2023 04:11:58 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=170910&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wjdvj034dobg5ksk2obqfmb6&affsource=95 | 18.192.108.151 | 302 Found | 0 B |
URL HTTP/2a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=170910&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wjdvj034dobg5ksk2obqfmb6&affsource=95 IP18.192.108.151:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=95%3B102f187085a866b2029a7e7053f859&affiliateID=170910&source=102785f5b0a72d1368f6c8ac2fc31f&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wjdvj034dobg5ksk2obqfmb6&affsource=95 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 02 Dec 2022 04:11:58 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.anmdr.link/170910/3458/0/?aff_sub4=_bucket&aff_sub=95%3B102f187085a866b2029a7e7053f859&aff_sub2=75077&aff_sub3=wjdvj034dobg5ksk22l4dv0g&source=102785f5b0a72d1368f6c8ac2fc31f&aff_sub5=_95&aff_sub4=ALGO_bucket
pragma: no-cache
set-cookie: 2d2fb929-79a5-4a1c-840d-3f370da182b6-v4=RDXjculXpjVmjcrUuUgEIYcnuZsk2y7D7GB0f6shLKc; Max-Age=86400; Expires=Sat, 03-Dec-2022 04:11:58 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=Z8DCVxZD0W5RJvHV%2BH6a63foIw7ROgH3d7VwT2AowgsJq14RpoTa01ZldpIyYm0SRjZ4XLv4tRC7B79UnPFhE79D1Y%2BhOWZJ%2FSRbusN8758OG5m%2BN%2ByE1ZkMSeFouz0E6wTOCOm6vyCWI1yOOpcymg%3D%3D; Max-Age=31536000; Expires=Sat, 02-Dec-2023 04:11:58 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.39.94.191 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.94.191:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h+fsVILHpaRcCpN+aLdS4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Rw6HfJSR9enoZ33YN0bbmvQz1mQ=
|
|
| t.anmdr.link/170910/3458/0/?aff_sub4=_bucket&aff_sub=95%3B102f187085a866b2029a7e7053f859&aff_sub2=75077&aff_sub3=wjdvj034dobg5ksk22l4dv0g&source=102785f5b0a72d1368f6c8ac2fc31f&aff_sub5=_95&aff_sub4=ALGO_bucket | 54.230.111.117 | 303 See Other | 446 B |
URL HTTP/2t.anmdr.link/170910/3458/0/?aff_sub4=_bucket&aff_sub=95%3B102f187085a866b2029a7e7053f859&aff_sub2=75077&aff_sub3=wjdvj034dobg5ksk22l4dv0g&source=102785f5b0a72d1368f6c8ac2fc31f&aff_sub5=_95&aff_sub4=ALGO_bucket IP54.230.111.117:0
File typeHTML document, ASCII text, with very long lines (446), with no line terminators Hash7044a27a8273a0e730c109b303ff047b e95db3814465e124a39b888b25786c17f4cf8b29 b9d9188d57c3c153fc44a3302a9a8ca8026cea46a204f7d79d3d48ae7d3fb93d
GET /170910/3458/0/?aff_sub4=_bucket&aff_sub=95%3B102f187085a866b2029a7e7053f859&aff_sub2=75077&aff_sub3=wjdvj034dobg5ksk22l4dv0g&source=102785f5b0a72d1368f6c8ac2fc31f&aff_sub5=_95&aff_sub4=ALGO_bucket HTTP/1.1
Host: t.anmdr.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff_ran_url_3785=26412; enc_aff_session_3785=ENC038a2027c940be68054dcca3532ee16526f24f13ccfe10eb5d0d6794ca0c8252dafe031e85497b0702cd7ed52816972ddab08041b763b326cb78d6df2f6642df6fa973ee6ea6a407f9b7b3044ce95dc67e2707e1dad6aeddf4dfbdfd9d1b8cce62a6d5fd4c21867d5bc608e74bfca93a43115b2c0838781f467aeb05088a0a1feabfcdebb6d1b913515ba906cd9fdef52d187f412efa3a3cf248f4cc78b12c8004b51e40b0a246fb2de5d694b4d2a62e0b009e8d4354a7a8365cc1a0fce12a5425171f039d; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 446
location: https://jwbvdz.exceilentdate.com?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_95&click_id=102bc4391bb0ffc94bb6af796c6066&j1=1&j5=1&j8=1&j9=1
server: nginx/1.19.0
date: Fri, 02 Dec 2022 04:11:59 GMT
set-cookie: enc_aff_session_3458=ENC03a05957eb1ab351874b5307fd8f55dbf96d0244dce5abf11881f322ed1c0eac3c92551ef6da365de3fca7252e08e659f8a054e89fefd6844b862924baf33f2cb556f02eee2b9ba150fb531c5076c748bd0d10f7c1b7beca6a757463819554b949c284a205f3576dd89dad46941952e403d30a1258ac73ca2170a4105ea954a0775afc6c99e7c333a226b51b1eb5dca45e68fdef29e95390911515773a33f4a359711f8b64502dd6820a486b77d812b6cb0d4be855ddb34faf7d2e12b22cc6585e949641418d9997b992294cd711c875f3ed017a8ce7eba01d2be3a6bee9b1f8951047f055; Path=/; Expires=Sun, 01 Dec 2024 04:11:59 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Sun, 26 Oct 2025 14:51:59 GMT; Secure
tracking_id: 102bc4391bb0ffc94bb6af796c6066
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SmEuFb4kD5RIBWUQJiGcd0ox1CQTNNq0XrfALQ5ubAmFeiOHRAjAkA==
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash515959d8925d2856e19640068c3ae85f 145e18faa81e6a580f970db7ace5f1efcc42d7ff 62135118b716b1a0b5105086822c4d699b08d3372fa7ee6702a168d879fea6ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62135118B716B1A0B5105086822C4D699B08D3372FA7EE6702A168D879FEA6BA"
Last-Modified: Wed, 30 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19156
Expires: Fri, 02 Dec 2022 09:31:15 GMT
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/css/main.css?1669911562 |  184.31.15.107 | 200 OK | 1.7 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/css/main.css?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeassembler source, ASCII text Hash6b4ce5aca03472e8adac26ab544aeeea 7462e1d9f4cfbd2d11236dc7674df4a9ea5d8509 e88b031341a4dff0770e87f68331ab95071618a7ff320f758ae6ff50907e4466
GET /landings/277392/1669911562/css/main.css?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: xhyrooYBVpluOQ11P2Mi7RptRIvzq+utA3X9J0xYYLFg5n2ybXjeyS/FqX2T1fEaJRLQ2myJCTg=
x-amz-request-id: 0WE4ZXFRMVPSBYBQ
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "367c2f8f5022188248358ef69e97c014"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 1713
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/css/popup.css?1669911562 | 184.31.15.107 | 200 OK | 619 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/css/popup.css?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeASCII text, with CRLF line terminators Hashf140ccb2b3ee4baac59fd038f029a31b ffff86bf4e2538fd63e07a91a3d769c7fb5150d9 389f3d6adf5fc48317bdf0d85eaa23dd2a18578736609da35190baba464c0298
GET /landings/277392/1669911562/css/popup.css?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: WbIEprZjeVE4erIeTaGdempLt2Z1ZpScUj8GZV+1RtLoYFCYPDKmKJjNE28yJ5ZdD/v1u0pOQ6Y=
x-amz-request-id: 0WEAPK3GJQYA22WD
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "b47a3a5faf928711066b6f0deb015420"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 619
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/css/reviews.css?1669911562 | 184.31.15.107 | 200 OK | 898 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/css/reviews.css?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hashdcb5556e99130ae1ca9dd0c88a908233 034594c377a950592aff5920bd890b1d7e9b77bb e308183ac502f64274cb9bc068915e6701ba89f10550d7482bcae32fe961d701
GET /landings/277392/1669911562/css/reviews.css?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: rovOyRDKjUO0w+7I9Au6MSBiYuWi5S0/xAQXKoL10FRuEF5uDJFzUfSBZLx1T3eyHDvzzL4KmfM=
x-amz-request-id: 2TB6KQNNDKST4H2Q
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "b8b7d60d5363b89bbd495616c2d5c3f3"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 898
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/js/trls.js?1669911562 | 184.31.15.107 | 200 OK | 11 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/js/trls.js?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hash2cc16ee545886ac217511e44f8fcfd1f 3def6fb1d0341a47188343ad9b72a43a1108dded 883c2c7df327c87c4f8f677bc9113fb87e4b509dce6b71db8b67124a9aa5ce82
GET /landings/277392/1669911562/js/trls.js?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: yrf0odPNxGh0fSZ3QS66Tuc+GiO7ve3cVeFwTG3OT9H6CZN9k4o4HIe0BUbrwwSlJBnDy0EKJx4=
x-amz-request-id: 0WEEA20NC56JRWGG
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "08398cde9d04669865ac1a40cf30840b"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 10725
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/js/script.js?1669911562 | 184.31.15.107 | 200 OK | 356 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/js/script.js?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hash9a75d29efe08c33843a4d62f7b35836d 8ab307814e322817cb5ec88b2bb77669b9c81d8f 0088bc7ee3ef7e624cf35a3e9b7eee6716837951fe03e5a2940e19a0f984d771
GET /landings/277392/1669911562/js/script.js?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: sgGk6/OgYQ7Fv7/gQO105mJJ8JLvjgEQJCLk7lJqaGjDosrHtJg4H3QFiC3S+00UJzx03euxSG4=
x-amz-request-id: 0WE70QB0DHPXTAA7
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "9a75d29efe08c33843a4d62f7b35836d"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 356
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/js/title_tanslate.js?1669911562 | 184.31.15.107 | 200 OK | 1.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/js/title_tanslate.js?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash0e212ad4454c941c45c2e57df42c2b4f fe9d7c484c2c0d7a6475692ef984c53a06c95406 e950a9e5e696f39d02028b27a4cd82fab1b6fd07fa34a238d3a3f7f5e90d95c3
GET /landings/277392/1669911562/js/title_tanslate.js?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: GYtTXg9TGfT1o/FT7FbSOwv6ap2gpn1uuplol3wp9tuC6FWbUrf5tjYlXKPgfR5i21LWo2QuQIQ=
x-amz-request-id: X4Q675EJ0R9D2SCJ
Last-Modified: Thu, 01 Dec 2022 16:19:26 GMT
ETag: "5f373fa5bf21c44b9ad23b70ef96e73d"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 1298
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/js/jquery-2.2.4.min.js?1669911562 | 184.31.15.107 | 200 OK | 36 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/js/jquery-2.2.4.min.js?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (530), with CRLF line terminators Hash378507f30ab981ba7c512e07d134caaf dd17d6f540df83bab63921deda1b9462a5047c00 97d25af867afe95682e66a2d01f9c5e2f085df402403671e6ba885f49a1e03be
GET /landings/277392/1669911562/js/jquery-2.2.4.min.js?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 3l46ztx4EO1jgxMBfOH8+PUfz0QYuEGvhxVME93OEZvZDF4p7LWloxq806DId6NnvmhFzxc2wV8=
x-amz-request-id: 0WE8G13NY9HF04YE
Last-Modified: Thu, 01 Dec 2022 16:19:26 GMT
ETag: "61a04f254179208c931ebf40f4cfddf5"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 36023
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/js/translates-review.js?1669911562 | 184.31.15.107 | 200 OK | 16 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/js/translates-review.js?1669911562 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hashd38197a30177a097f5e1f79a2c812fba 38c96e285cd76fdc44c47a750780fcad35ac3810 7b0abe613122bd58d935ddf4922483de4e1d8bd0999cbc2f8bcb8d47fde41701
GET /landings/277392/1669911562/js/translates-review.js?1669911562 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: fejHSf26QTWwtNNzqTruJlFTnP0cWhs7Bo9ja9w/yBBgmif1MrjGbI3mrzuCyUiRLaRY2uSIL+8=
x-amz-request-id: X4Q00NBCGBZGREM5
Last-Modified: Thu, 01 Dec 2022 16:19:26 GMT
ETag: "8547abc3c71e4428fb56d97051398655"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 04:11:59 GMT
Content-Length: 16488
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3519a58310eefa01756f0440e2acd7dd 50153382830684a6abb653dc7b4e41d7c7e386b5 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash05917f7542a781275c12d43562be1507 1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3 2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/5-eu.jpg | 184.31.15.107 | 200 OK | 2.9 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/5-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash27109a247208262e6293950ca8f5450d cea89616d15ad45a0f2b04082dff608abd96b800 86755df878f9f09c1b06deb1ac049db77b1931d3b0f650548fac960b3fedaa96
GET /landings/277392/1669911562/images/5-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 20mKftfbRLafx+N3CV3Jz0VN9waiJAdqyI+UPHkKqyAKwqOyjF12nylSEs5jkLEFdy7lIef8I6s=
x-amz-request-id: JNSWXBE4HHFX55MA
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "27109a247208262e6293950ca8f5450d"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 2879
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/6-eu.jpg | 184.31.15.107 | 200 OK | 3.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/6-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash9a6870069cb979e16b239f9ed485fb3c c1dc7f3620c8cc391648c550f91b269b04d3c612 3e280ac6e0be5142f62957076a5c99e792eb61533e23f33b165aea4d522de818
GET /landings/277392/1669911562/images/6-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: V9VH864Y74dfGcFRohwnbQsrXe7UgS4yGTNkcPzLCaIkZ3UOc6wCqN+jJnDIcs6fiFT5oUuBIQw=
x-amz-request-id: 2BC6GPY0WFNTMMM4
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "9a6870069cb979e16b239f9ed485fb3c"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 3256
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/filter.png | 184.31.15.107 | 200 OK | 2.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/filter.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 38 x 33, 8-bit/color RGBA, non-interlaced\012- data Hash4d51ab70b5dfb7e1262bc7b07d0cfdc6 4e7be71c5ce43cc934262788d47edc297fcf4b6b 8b9dd6e23d69ea8f9493b3a21aed910d22744dae467c8ea5f41805c35788adfc
GET /landings/277392/1669911562/images/filter.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: JjZlY8zH2rnH5tQyGwRJME+4Df6xLjumNcCUcuqZouN7RSGBBXoOEklhIzE7ZcKRUPIOX9BqtWs=
x-amz-request-id: 2BC03BGX2AFYS962
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "4d51ab70b5dfb7e1262bc7b07d0cfdc6"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2287
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/btn.png | 184.31.15.107 | 200 OK | 3.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/btn.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 55 x 55, 8-bit/color RGBA, non-interlaced\012- data Hash9ec971aedb388ea8b434df05fb1de307 f894a11c1bb5e643bb21e906c8e405dbb6976afa 01988f1941b629e70fa08dd562ab01226ae1c3e33fce0dcf7fd490073152be2d
GET /landings/277392/1669911562/images/btn.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: zDpsSEaY56n+rWg8mtPgFwWpCCe53OyV1CPq+sX04fxHnTSWPIZAMnOxIVUTs381YOdmxf97kyk=
x-amz-request-id: 2BCCKBTSS6MKH0VF
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "9ec971aedb388ea8b434df05fb1de307"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3302
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/camera.png | 184.31.15.107 | 200 OK | 16 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/camera.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 29 x 22, 8-bit/color RGBA, non-interlaced\012- data Hash2241535df47e4118224448152eb91b83 ffedced57c5adb80c470dd79a45f6d67c82122f1 fa7b21b2662408264e5a88b2899d4e7fd841c21c1acb6f4b329bc26a04498ddd
GET /landings/277392/1669911562/images/camera.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: WaGG9kKTft6w9AMO9IadL7B/DC0SUYJjcToZVK3U+pIy77t7fDt4ROO+3k0HZ7uzxVGyWVULs1c=
x-amz-request-id: R987S28VP89T64J3
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "2241535df47e4118224448152eb91b83"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 15843
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/lightning.png | 184.31.15.107 | 200 OK | 15 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/lightning.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 13 x 22, 8-bit/color RGBA, non-interlaced\012- data Hashf7d041540d78ae007d1fe5aed28bfe22 87f0f527b713204abd6eb85f52838857b0b1f313 3404796b23bcfa338b2b6c0fd2e69c7c15d7711e315362b513e7c484881a5c28
GET /landings/277392/1669911562/images/lightning.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: r8jX8ieHeDIqzvnFD7iIcDVziulwMOqnqjSgtFg79OW1TjsqAMBi9/JnBedYtNYXe9dP0PGsBSg=
x-amz-request-id: R989S7706256B1ST
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "f7d041540d78ae007d1fe5aed28bfe22"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 15158
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/blocked-icon.png | 184.31.15.107 | 200 OK | 502 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/blocked-icon.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 23 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash87487ad255dde0624f59abb85602defc caafad17df41875bed690353ead6cc495a9bf8c2 f7a4b3fb74b9e06f243f23ede51a801a0aa3fa2c0040bc44a49a97444780923d
GET /landings/277392/1669911562/images/blocked-icon.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aK7DfRn6hHp+rZvGwRbJ1iId2T4UMpBKYXjc94PV8vRAeUO6r9ivXkwsMkArFk7fsCkXcAeXj/M=
x-amz-request-id: SC9BRKGKR7R3H5YB
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "87487ad255dde0624f59abb85602defc"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 502
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/8-eu.jpg | 184.31.15.107 | 200 OK | 2.5 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/8-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash41bbda91cef3f22db1d45d66f7ca0961 e2f8f56674e0180063a4f8287931dc0b273baf8e d0f8fe31f17be4afd352a60628de61eef59ee08ac0ecddac9cfe4e4a504f4f0e
GET /landings/277392/1669911562/images/8-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bQKReVva1LaGOk9NyqvO3/PrYjoin7OCv86tOPbJcbgoGlRMddMoPVUQ3rgPOPasGNDkk+VGH2w=
x-amz-request-id: 2BCEHPEVT8GRV3B5
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "41bbda91cef3f22db1d45d66f7ca0961"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 2458
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/110010_1.jpg | 184.31.15.107 | 200 OK | 57 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/110010_1.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 682x388, components 3\012- data Hashf0a79db4dd92694735ee0e6a311fc42c af0cbc1a6abcade4ae78b7df736a0206c218f6c1 09e3f147578d663b2b33b05eec941e4cd5f03afa54091a458e8cdc76a9ea9977
GET /landings/277392/1669911562/images/110010_1.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 8zN5xVc9SRU2kdTuDEaFq2KcOJsPTpQAHHJ253pp91CFp1GyCaMtFzl64teD3KoRzcHcTzAP+3w=
x-amz-request-id: X4QFKK45G4TMGF77
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "f0a79db4dd92694735ee0e6a311fc42c"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 56596
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/1-eu.jpg | 184.31.15.107 | 200 OK | 4.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/1-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash6e6d0b84c81d847e24671a711115a781 20dc2d359e437dc10ceefea4d3c7b5189c2e58d0 515974c9245ead07b3332ca22fa1581622118c75955941452140a602646aa553
GET /landings/277392/1669911562/images/1-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qu16gB0TBT1QI1g/vn5YyesLQU9MgwYXfxD1J8XO9bfkbNc/vlNROWomocLdOFpM4Vs6Q2Xg4CM=
x-amz-request-id: R98CEGP3DPR6Q7DQ
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "6e6d0b84c81d847e24671a711115a781"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 4292
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/icon-city.svg | 184.31.15.107 | 200 OK | 839 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/icon-city.svg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (735) Hash5f5ead641bc30316f498592eec2016a1 3195aa33596ba190a6584ccb75124dd9d9c13261 f028477ede528af987acd2bea73c8e462ea4cd6cf1137aae5085c85a82d93409
GET /landings/277392/1669911562/images/icon-city.svg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: HMqgt4clTM+yfqRHOkP77EacLGUvvlUMSiYfm7KzxLmp7PXoOHVzJlc9cHU9/Z1Ivb8qsI0I2Nc=
x-amz-request-id: R989NPYZ8M6HZK64
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "5f5ead641bc30316f498592eec2016a1"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 839
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/preview.jpg | 184.31.15.107 | 200 OK | 150 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/preview.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=862, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=593], progressive, precision 8, 593x593, components 3\012- data Size150 kB (149522 bytes) Hasha04e546bb075c2adba6559501db4e8d9 fcc89d946f43be0505427f486e285dda5bedf24f 680b57e32b4b3dbba13d5be961805fbc627d902c40a0821c26ea6454c4b2792a
GET /landings/277392/1669911562/images/preview.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aHjDQducBID2cTdBuiWQj5LegkJZeytov1HTObSprrOYVJTUSad2kxKdV8mUxBjmQcjqWWMSBGQ=
x-amz-request-id: 2BC9SHTYHEZCFS34
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "a04e546bb075c2adba6559501db4e8d9"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 149522
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/shield.svg | 184.31.15.107 | 200 OK | 1.5 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/shield.svg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (310) Hash0c7a0dfd64cf020cd8a6dc0c3df1dbdf f705635388aebebae1223d828c38233067f28ab1 856fdb53067254df9495660a355e5ed91936803b567867f1053ce5fb97107888
GET /landings/277392/1669911562/images/shield.svg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /1OyxVA46U94gi6AKpAypa5YvCMBUvVavbOzg86WKgandcPH21wE/w3r85DrNmJtx9cEzGCuBh4=
x-amz-request-id: R986W3K38VM021RA
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "0c7a0dfd64cf020cd8a6dc0c3df1dbdf"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1539
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/unlock.svg | 184.31.15.107 | 200 OK | 2.4 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/unlock.svg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (944) Hasha732e1e06affb4575c050fdb0131e5ca da4f4f204a4d22c7424274a91520e0ea993c48c7 e17f481e5fe197e600ffe6cf53a94a4e49a73b6b817ff560cd92c3dd501d603f
GET /landings/277392/1669911562/images/unlock.svg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OLV1nm3+x+y275eDAqdBRVmMG3XI7A45WnGKMbUCKGOy7u3VOo9x8XDwk1EVjwGA22DBaCH1xhU=
x-amz-request-id: R9807S9J2TZCAJ9J
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "a732e1e06affb4575c050fdb0131e5ca"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 2378
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/password.svg | 184.31.15.107 | 200 OK | 1.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/password.svg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (330) Hashf42aef7f97d4c9bdb074673081f38ac7 0231df782e371d139c826e091279acd9a07e691c 5fca7f589cd825e1f152e0a1677d6cbd0a3ee3ecde05905d572af87e8b453eac
GET /landings/277392/1669911562/images/password.svg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ivfT2em3rQ9bjXyzunPz/ZxyZDA/Jc56Pb5VKMhExJ0g1VTFcE74ovo38L9zqd4HsUsaIn1lK+E=
x-amz-request-id: R98BYPWC07ABEXR9
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "f42aef7f97d4c9bdb074673081f38ac7"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1339
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/7-eu.jpg | 184.31.15.107 | 200 OK | 2.3 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/7-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash8155d8ecc7dc2d9b29cf99ab85c3d2a8 ba784563c7787760b318af24ea274ad6df2c5b89 7e368b2c331e65b43d9e6977dde473b4ee4ed25f0253e0d086ca676438b97d27
GET /landings/277392/1669911562/images/7-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 29XYU3jp46yebisaYECGavHzdlsiKUENYLIKm7KC5DWuhWGi0vUJT0n/Ub0KjHVUnnf30bmVmTU=
x-amz-request-id: 2BC3DEE00C6SGB1Z
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "8155d8ecc7dc2d9b29cf99ab85c3d2a8"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 2282
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/3-eu.jpg | 184.31.15.107 | 200 OK | 3.9 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/3-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 80x80, components 3\012- data Hash1dc512dcb0850f22cfa72c789578085c 933e9c5648e782c9f9a1504d2248f0acb4b9950b 7a27ad3bbf259cc02f80f496c19e6033d958362c1b5075c1957bb502f2666d00
GET /landings/277392/1669911562/images/3-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: LGiYan0Jqnlmqiey7yEH8kYkcQZPPtqrOVQlmUYTPhEXW/p5d/Kj46OKyxyPjdQKgIeysJmqPaw=
x-amz-request-id: R98DWFQMZXHW7K68
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "1dc512dcb0850f22cfa72c789578085c"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 3946
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/2-eu.jpg | 184.31.15.107 | 200 OK | 2.0 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/2-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hash66b6dc51bd19c799dcadf1dbeb628d9c ff7fe6049e944186764bfc5041d624ec11f8d362 d3c1502509ae60909fe60c46cc58c41c1a9fe53ee7aeffb92d37a074ba8550f0
GET /landings/277392/1669911562/images/2-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 2VVhuDSwpBd2pmkGbzRvXfwDclWYwbU07wu1zhuX7vx7FieuvMcvSKJIWHxWOK/XUf08N2D/oi9ZLQnkZ3FGDg==
x-amz-request-id: 2BC6P9PRS4C8C6HV
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "66b6dc51bd19c799dcadf1dbeb628d9c"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 2009
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/4-eu.jpg | 184.31.15.107 | 200 OK | 2.6 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/4-eu.jpg IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data Hashcb3aff7c886e4f72a98172b873b5e62d 33de244dcb4db4abe54b6508ae8d1546eb279aa5 d22825c9a1ff2c18506f0c2c3abaf3bb77f8352ba7bd410d50d35f20adbab08e
GET /landings/277392/1669911562/images/4-eu.jpg HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: wnbFkH9v5YHvUslBa7UqT02GnjSTcybZI5bALMwGNCdRqDPTU8vUJ5cMy1SY1kZN3VvSbXVmXU0=
x-amz-request-id: 2BC5TNP00V1185AR
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "cb3aff7c886e4f72a98172b873b5e62d"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 2586
Date: Fri, 02 Dec 2022 04:11:59 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash05917f7542a781275c12d43562be1507 1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3 2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css2?family=Ubuntu:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 2.3 kB |
URL HTTP/2fonts.googleapis.com/css2?family=Ubuntu:wght@400;700&display=swap IP142.250.74.106:0
Hashb401bdbadc386808e23b2779501c944c 038abe3f64b407e754057a78e7c9377083bf882a c75a336ed3f67dcde78d061cf9c2be29725cf10941deb597d8fc1746f1314e41
GET /css2?family=Ubuntu:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 04:11:59 GMT
date: Fri, 02 Dec 2022 04:11:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash27002fde234e78c7bde340bc621e933f 1bdbe4f1861601b9300101a1e6b3c143ce077e03 48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash27002fde234e78c7bde340bc621e933f 1bdbe4f1861601b9300101a1e6b3c143ce077e03 48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:11:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jwbvdz.exceilentdate.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 117465
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jwbvdz.exceilentdate.com/ortb |  63.32.216.166 | 200 OK | 13 B |
URL HTTP/2jwbvdz.exceilentdate.com/ortb IP63.32.216.166:0
File typeJSON data\012- , ASCII text, with no line terminators Hash1031bf08481e45e42ceb3fd978c3d379 3d6d43df4c45f09f5d68593646fd83352323a5ea c99e0e70ba976626855bf7f83fc0e333b57833bcaf3dcfba16215a6e4fa3e208
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /ortb HTTP/1.1
Host: jwbvdz.exceilentdate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 295
Origin: https://jwbvdz.exceilentdate.com
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/?s1=120749&s2=1506505&s3=170910&s5=backuser&click_id=102bc4391bb0ffc94bb6af796c6066&iexpp=1&j1=1&j5=1&j9=1&utm_source=1e3a4e532f1c7040&j8=1
Cookie: unique_id=638971ae00040814; unique_id2=63892c76000172d0; 63892c76000172d0_c=1; ref_token=120749; impression=; 63892c76000172d0_sl=[277392]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:11:59 GMT
content-type: text/plain; charset=utf-8
content-length: 13
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jwbvdz.exceilentdate.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 117486
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/favicon.png?t=20221202041159 | 184.31.15.107 | 200 OK | 5.2 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/favicon.png?t=20221202041159 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hash26ef38d37b06edf5c2a9c5941bdf20c7 7edfefe803a2c791a49c64228449916a227cc9bc 31c7cba7ef9eb3004a86e506bf976c59248e8518ba7cc0929f6fdfa2f3b36af2
GET /landings/277392/1669911562/images/favicon.png?t=20221202041159 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qtwm+MloNEKyMpMB6QLW9f5EMfRGHRlIIKXM/tg5g4z9dI+5WPKqGjmFFkfvgVCe/g5IW84l/qw=
x-amz-request-id: CH9NCV0TXPM2AA49
Last-Modified: Thu, 01 Dec 2022 16:19:25 GMT
ETag: "26ef38d37b06edf5c2a9c5941bdf20c7"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 5207
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash27002fde234e78c7bde340bc621e933f 1bdbe4f1861601b9300101a1e6b3c143ce077e03 48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10069
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10069
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10069
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10069
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10069
Expires: Fri, 02 Dec 2022 06:59:49 GMT
Date: Fri, 02 Dec 2022 04:12:00 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash498ab4412ed5cf977bc23e4e870894b0 23753fe8af09ec8ffa10eed4d201a71833885c99 036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:09:38 GMT
age: 21742
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6e65083422468e512aa73eb68f20b2ec 73884daab5e71e4917637b3679c0bb5a1f0447de f0d97bb9e3f01bbdbe91ba1f9b6ea0f649c66192383c51fe5c7ca9ac2a38ebdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9719
x-amzn-requestid: c4ba3502-e191-40fa-8ae0-71dc6f733db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPjhHE8woAMFyKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382e606-70ab0e5523c91e5420efec78;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:22:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oBn917CDV6DjSs9TAL2iBU0Rn8_f8ny1rAVXrbI9KML2P7pxusbdjA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:43:52 GMT
age: 1688
etag: "73884daab5e71e4917637b3679c0bb5a1f0447de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash25c68d8b1fae82820f93efca500fd848 45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48 f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:54 GMT
age: 23826
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg | 34.120.237.76 | 200 OK | 2.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb47431190f34eccf0a6efb98e2a32b7d 9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 22924
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash65bcc96d51cd1a45dd61a4dddef0b529 5ebd592fe35d0479855700baf8525a621d2eec2e 11bfdb9b2f9730e35596e636b0f75e819a70edef0488e671ac82d1bf53e56868
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F474ccac4-fb8f-4a01-8195-4840a857fbe7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8159
x-amzn-requestid: ed2fb67a-2113-4240-978e-e7c978a3ca3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgVH1KIAMFjOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-0c4966b87f844ec3624e9dae;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ilP6IS-DUqN7rKZB9m8EX900E5Edscm8DkK0SMKPkJqvyCJ7M1kZoA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:58 GMT
age: 23822
etag: "5ebd592fe35d0479855700baf8525a621d2eec2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg | 34.120.237.76 | 200 OK | 1.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash367a113e3826442861c63ba501d2d67d 764f6910ecc1ee436a70aa83f5bd363c2e500341 5e5cc53aba99e68211c86a2fd83ac4a023d1c82875d60a09d52875ef129cbb71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 1654
x-amzn-requestid: 537d523f-a3fb-4514-bda5-ecc834c1ed39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgBEFNIAMFTjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dff-0c12ccea20e953c236ca2b1b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IXNpFJsiqPvrg8f-op2tcIVW2qoV7ZPm12wsTTXfYu0369N4Csy8BA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:56 GMT
age: 23824
etag: "764f6910ecc1ee436a70aa83f5bd363c2e500341"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap IP142.250.74.106:0
GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 04:11:59 GMT
date: Fri, 02 Dec 2022 04:11:59 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn-dimi.akamaized.net/landings/277392/1669911562/images/bg.mp4 | 184.31.15.107 | 206 Partial Content | 0 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/277392/1669911562/images/bg.mp4 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
GET /landings/277392/1669911562/images/bg.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
x-amz-id-2: 6o7oq8BAdDa2ul2dllj+xk3BQgxoay6vMQBDV6p1FsTGaFTBF5IO6w/K05BvRkylTNdTPMaf47I=
x-amz-request-id: 2BC486ZXPK8PCX6X
Last-Modified: Thu, 01 Dec 2022 16:19:24 GMT
ETag: "e76858ed8489b22c01e5e7bc891c4eab"
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Fri, 02 Dec 2022 04:12:00 GMT
Content-Range: bytes 0-1077924/1077925
Content-Length: 1077925
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| jwbvdz.exceilentdate.com/?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_95&click_id=102bc4391bb0ffc94bb6af796c6066&j1=1&j5=1&j8=1&j9=1 | 63.32.216.166 | 200 OK | 0 B |
URL HTTP/2jwbvdz.exceilentdate.com/?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_95&click_id=102bc4391bb0ffc94bb6af796c6066&j1=1&j5=1&j8=1&j9=1 IP63.32.216.166:0
GET /?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_95&click_id=102bc4391bb0ffc94bb6af796c6066&j1=1&j5=1&j8=1&j9=1 HTTP/1.1
Host: jwbvdz.exceilentdate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:11:59 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=638971ae00040814; Path=/; Expires=Tue, 31 Jan 2023 04:11:59 GMT; Secure; SameSite=None
unique_id2=63892c76000172d0; Path=/; Expires=Thu, 02 Mar 2023 04:11:59 GMT; Secure; SameSite=None
63892c76000172d0_c=1; Path=/; Expires=Thu, 02 Mar 2023 04:11:59 GMT; Secure; SameSite=None
ref_token=120749; Path=/; Expires=Sun, 01 Jan 2023 04:11:59 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Fri, 02 Dec 2022 04:11:59 GMT; Secure; SameSite=None
63892c76000172d0_sl=[277392]; Path=/; Expires=Fri, 16 Dec 2022 04:11:59 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0