a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547988?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&Target=Email&affsource=testbl2510&bo=2753,2754,2755,2756
18.192.108.151302 0 B URL HTTP/1.1 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547988?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&Target=Email&affsource=testbl2510&bo=2753,2754,2755,2756
IP 18.192.108.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bb7e836a-79d2-4d6a-adaf-2b9ae2547988?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&Target=Email&affsource=testbl2510&bo=2753,2754,2755,2756 HTTP/1.1
Host: a.vfgtg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 29 Jan 2023 05:58:00 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&target=&Site=&Bnr=ALGO&cid=wbfc6l0ac56ol58mioivm39e&affsource=testbl2510&source=55609_testbl2510
Pragma: no-cache
Set-Cookie: bb7e836a-79d2-4d6a-adaf-2b9ae2547988-v4=gxS3xLeSQttC7eT5Fg4i3_2JBjK9Hni9zTsSGG8loJk; Max-Age=86400; Expires=Mon, 30-Jan-2023 05:58:00 GMT; Domain=a.vfgtg.com; Path=/; HttpOnly
cc-v4=fJe%2Fo7MGOoB%2FPe%2BIWCheLYZAO2jS5uZoe%2BlKv8iEQmN08atQRaYHIjcOEqDeIGD74lSTdbt7meNtpHW7IgIBdZuAzSb8ZE452XCE7jcQ1egShShW07WH3xl73lLQm%2Fl8brWtfnDHdhXKrnhgY%2B454w%3D%3D; Max-Age=31536000; Expires=Mon, 29-Jan-2024 05:58:00 GMT; Domain=a.vfgtg.com; Path=/; HttpOnly
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3569
Expires: Sun, 29 Jan 2023 06:57:29 GMT
Date: Sun, 29 Jan 2023 05:58:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13637
Expires: Sun, 29 Jan 2023 09:45:17 GMT
Date: Sun, 29 Jan 2023 05:58:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7881
Expires: Sun, 29 Jan 2023 08:09:21 GMT
Date: Sun, 29 Jan 2023 05:58:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 05:43:08 GMT
content-type: application/json
age: 892
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Edgeywaa0noKe3TeQEEAVWD/QVwbu5rq1pvzhZchNfqnm1ipGekiic8RRmw/o48o5lu0WrpJOkU=
x-amz-request-id: 5WHF12G8NMGXNVD2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 05:21:16 GMT
age: 2204
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&target=&Site=&Bnr=ALGO&cid=wbfc6l0ac56ol58mioivm39e&affsource=testbl2510&source=55609_testbl2510
18.192.108.151302 Found 0 B URL HTTP/2 a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&target=&Site=&Bnr=ALGO&cid=wbfc6l0ac56ol58mioivm39e&affsource=testbl2510&source=55609_testbl2510
IP 18.192.108.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=testbl2510&affiliateID=75077&source=10237602aff8142f1f72ba0b870674&subID2=55609&target=&Site=&Bnr=ALGO&cid=wbfc6l0ac56ol58mioivm39e&affsource=testbl2510&source=55609_testbl2510 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 05:58:00 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub=testbl2510&aff_sub2=55609&aff_sub3=wug9cce3l192858m21q13nbm&aff_click_id=10237602aff8142f1f72ba0b870674&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_testbl2510
pragma: no-cache
set-cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=Y0Rgc9BDqSmzk73vcuEgnA9QEvKehn3x-gOm4Cx1pXk; Max-Age=86400; Expires=Mon, 30-Jan-2023 05:58:00 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=XC%2FMdRYzwjBenne6vgcgdgxvlpmw9jqPri%2BNQTC%2FJ923nK5QQbmKXYd74FJfTwcw9HIxFcJhamRsAUkmnT8FCQf%2BzzfHma7f4vYW5OexVwgqXDw%2B9q3Ej1JTSwA0eLDqoeqxzX7aPV8ptZjZNdhrSw%3D%3D; Max-Age=31536000; Expires=Mon, 29-Jan-2024 05:58:00 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 05:58:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 05:49:04 GMT
age: 537
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash e040ff5aa7863ec92f847263aa281903
8c869d66753c263edb599c17419161865aec7bfb
92f9ca2c4299113542f23cb69b177f180ccb3562dd8bed4e8dec7c9933a31322
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92F9CA2C4299113542F23CB69B177F180CCB3562DD8BED4E8DEC7C9933A31322"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16841
Expires: Sun, 29 Jan 2023 10:38:42 GMT
Date: Sun, 29 Jan 2023 05:58:01 GMT
Connection: keep-alive
s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub=testbl2510&aff_sub2=55609&aff_sub3=wug9cce3l192858m21q13nbm&aff_click_id=10237602aff8142f1f72ba0b870674&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_testbl2510
3.218.135.42303 See Other 1.0 kB URL HTTP/2 s.sloffer1.com/75077/3785/26412/?aff_sub4=_bucket&aff_sub=testbl2510&aff_sub2=55609&aff_sub3=wug9cce3l192858m21q13nbm&aff_click_id=10237602aff8142f1f72ba0b870674&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_testbl2510
IP 3.218.135.42:0
File type HTML document, ASCII text, with very long lines (1000), with no line terminators
Hash e8c1c60f049448acbcca5024a1437fde
d4183652ad89e24caedbdf6a03d0d423afc1b00c
c91d088674e0eb5a48a14e6682844fa98eb0a5620f5201c4af351c3a267fafd1
GET /75077/3785/26412/?aff_sub4=_bucket&aff_sub=testbl2510&aff_sub2=55609&aff_sub3=wug9cce3l192858m21q13nbm&aff_click_id=10237602aff8142f1f72ba0b870674&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756&source=55609_testbl2510 HTTP/1.1
Host: s.sloffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 303 See Other
server: nginx/1.19.0
date: Sun, 29 Jan 2023 05:58:01 GMT
content-type: text/html; charset=utf-8
content-length: 1000
location: https://a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=testbl2510%3B55609_testbl2510&affiliateID=44542&source=102c203195d9355c1a2afc79570790&subID2=75077&s2=102c203195d9355c1a2afc79570790&s3=testbl2510%3B55609_testbl2510&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=testbl2510&affsource=testbl2510&aff_click_id=102c203195d9355c1a2afc79570790&affsource=55609_testbl2510&bo=2753%2C2754%2C2755%2C2756
set-cookie: aff_ran_url_3785=26412; Path=/; Expires=Mon, 30 Jan 2023 05:58:01 GMT; Secure
enc_aff_session_3785=ENC0393c2fc1b0e963c811765e1bf43b2a06c420f492f6c1c6e7b8bc56adeb4a91606ad0cd7d300813a3b9030de5c5c1e2060520380df7b5a9d4093ca0fc54447068e889c94966d26ef4a758af4699d90391e5015152030db3f5e0a5919ea32e3e6710fabc3fa23f6da739709e496e019047abb10217153ab83f3ea7f0e2f7e8af8d30a015573c8f24271d720c474945669d2d90e0a9a9810140b973455e6cc81710a63f4d76b8d703cfb90981f9e3e76aa44ac891bdbceffaa9885b3023accf8aaab313dbceb; Path=/; Expires=Tue, 28 Jan 2025 05:58:01 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Tue, 23 Dec 2025 16:38:01 GMT; Secure
tracking_id: 102c203195d9355c1a2afc79570790
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19409
Expires: Sun, 29 Jan 2023 11:21:30 GMT
Date: Sun, 29 Jan 2023 05:58:01 GMT
Connection: keep-alive
a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=testbl2510%3B55609_testbl2510&affiliateID=44542&source=102c203195d9355c1a2afc79570790&subID2=75077&s2=102c203195d9355c1a2afc79570790&s3=testbl2510%3B55609_testbl2510&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=testbl2510&affsource=testbl2510&aff_click_id=102c203195d9355c1a2afc79570790&affsource=55609_testbl2510&bo=2753%2C2754%2C2755%2C2756
18.192.108.151302 Found 0 B URL HTTP/2 a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=testbl2510%3B55609_testbl2510&affiliateID=44542&source=102c203195d9355c1a2afc79570790&subID2=75077&s2=102c203195d9355c1a2afc79570790&s3=testbl2510%3B55609_testbl2510&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=testbl2510&affsource=testbl2510&aff_click_id=102c203195d9355c1a2afc79570790&affsource=55609_testbl2510&bo=2753%2C2754%2C2755%2C2756
IP 18.192.108.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ab267e05-23a0-430a-bac4-772f7f629740?subID1=testbl2510%3B55609_testbl2510&affiliateID=44542&source=102c203195d9355c1a2afc79570790&subID2=75077&s2=102c203195d9355c1a2afc79570790&s3=testbl2510%3B55609_testbl2510&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=testbl2510&affsource=testbl2510&aff_click_id=102c203195d9355c1a2afc79570790&affsource=55609_testbl2510&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1
Host: a.vfgtf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 05:58:01 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=testbl2510%3B55609_testbl2510&affiliateID=170910&source=102c203195d9355c1a2afc79570790&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wvq7gcjb952cl58m2der5c4o&affsource=testbl2510&source=75077_testbl2510
pragma: no-cache
set-cookie: ab267e05-23a0-430a-bac4-772f7f629740-v4=bYJgMJ-6RETyC2WPcRKzMt6KMvaKnaVgKsq1Y9A4Hzg; Max-Age=86400; Expires=Mon, 30-Jan-2023 05:58:01 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=vTu5inIFSfGjT3yebkznSNFVrmMgFp%2FxoRsaGz39MLB5%2BazLbMwixlLEX8CkdnZiYyy0K3xKdQlVFVwokoG%2BPV9rYLMr5oNvuvH5gLad0Cm9VArz4jjvRYq6o6XInQVk3bK3Co4yWr3bg5FsjVX0vQ%3D%3D; Max-Age=31536000; Expires=Mon, 29-Jan-2024 05:58:01 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=testbl2510%3B55609_testbl2510&affiliateID=170910&source=102c203195d9355c1a2afc79570790&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wvq7gcjb952cl58m2der5c4o&affsource=testbl2510&source=75077_testbl2510
18.192.108.151302 Found 0 B URL HTTP/2 a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=testbl2510%3B55609_testbl2510&affiliateID=170910&source=102c203195d9355c1a2afc79570790&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wvq7gcjb952cl58m2der5c4o&affsource=testbl2510&source=75077_testbl2510
IP 18.192.108.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=testbl2510%3B55609_testbl2510&affiliateID=170910&source=102c203195d9355c1a2afc79570790&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wvq7gcjb952cl58m2der5c4o&affsource=testbl2510&source=75077_testbl2510 HTTP/1.1
Host: a.vfgtc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=Y0Rgc9BDqSmzk73vcuEgnA9QEvKehn3x-gOm4Cx1pXk; cc-v4=XC%2FMdRYzwjBenne6vgcgdgxvlpmw9jqPri%2BNQTC%2FJ923nK5QQbmKXYd74FJfTwcw9HIxFcJhamRsAUkmnT8FCQf%2BzzfHma7f4vYW5OexVwgqXDw%2B9q3Ej1JTSwA0eLDqoeqxzX7aPV8ptZjZNdhrSw%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 05:58:01 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=testbl2510%3B55609_testbl2510&aff_sub2=75077&aff_sub3=wvq7gcjb952cl58mig5ork80&aff_click_id=102c203195d9355c1a2afc79570790&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_testbl2510&aff_sub4=ALGO_bucket&source=75077_testbl2510
pragma: no-cache
set-cookie: 2d2fb929-79a5-4a1c-840d-3f370da182b6-v4=LJDPHV2EUY16kwP1R_wvRGSe57SmITIR3RP7ddLtEJw; Max-Age=86400; Expires=Mon, 30-Jan-2023 05:58:01 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=7ek4J3rqd3id7atS25NM5TmU6xhhXRYslejuLI6gYKwMijpTyyMbkCLgtjzwzJXEqjIp4m1DR2QfmHH2LTGOIBbJBCTiWA11i6CIsyWYWEi5M2%2BNjkqh8qOPB5w%2Bk6b35B1e2aeR9Z9HHGHTUY2E1w%3D%3D; Max-Age=31536000; Expires=Mon, 29-Jan-2024 05:58:01 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=testbl2510%3B55609_testbl2510&aff_sub2=75077&aff_sub3=wvq7gcjb952cl58mig5ork80&aff_click_id=102c203195d9355c1a2afc79570790&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_testbl2510&aff_sub4=ALGO_bucket&source=75077_testbl2510
3.218.135.42303 See Other 392 B URL HTTP/2 s.sloffer1.com/170910/8373/0/?aff_sub4=_bucket&aff_sub=testbl2510%3B55609_testbl2510&aff_sub2=75077&aff_sub3=wvq7gcjb952cl58mig5ork80&aff_click_id=102c203195d9355c1a2afc79570790&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_testbl2510&aff_sub4=ALGO_bucket&source=75077_testbl2510
IP 3.218.135.42:0
File type HTML document, ASCII text, with very long lines (392), with no line terminators
Hash 90499fb19c1060b9166fe601d2eee69e
07900e143e3d98a38f7cbd7a343e295ff0d84909
ad8f5ec981f2028bfddb0716e79333519f5d4d8b490667d808ec1efb2d581e33
GET /170910/8373/0/?aff_sub4=_bucket&aff_sub=testbl2510%3B55609_testbl2510&aff_sub2=75077&aff_sub3=wvq7gcjb952cl58mig5ork80&aff_click_id=102c203195d9355c1a2afc79570790&nopop=1&bo=2753,2754,2755,2756&aff_sub5=_testbl2510&aff_sub4=ALGO_bucket&source=75077_testbl2510 HTTP/1.1
Host: s.sloffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff_ran_url_3785=26412; enc_aff_session_3785=ENC0393c2fc1b0e963c811765e1bf43b2a06c420f492f6c1c6e7b8bc56adeb4a91606ad0cd7d300813a3b9030de5c5c1e2060520380df7b5a9d4093ca0fc54447068e889c94966d26ef4a758af4699d90391e5015152030db3f5e0a5919ea32e3e6710fabc3fa23f6da739709e496e019047abb10217153ab83f3ea7f0e2f7e8af8d30a015573c8f24271d720c474945669d2d90e0a9a9810140b973455e6cc81710a63f4d76b8d703cfb90981f9e3e76aa44ac891bdbceffaa9885b3023accf8aaab313dbceb; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 303 See Other
server: nginx/1.19.0
date: Sun, 29 Jan 2023 05:58:01 GMT
content-type: text/html; charset=utf-8
content-length: 392
location: https://tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_testbl2510&sub3=1026d60f9891e6d6b2cff687152bf2&bo=2753%2C2754%2C2755%2C2756
set-cookie: enc_aff_session_8373=ENC035b43c9be85e85209032480fbc6651f4d78aeda379117704a9882ff7bd2fb9236c1317104c6ecb5ba9244befc27808e57fe3c3104673ad715c715763790554ead5bed08d55855b45069bc95af9340247971ea2cb9caa5b1e754316b2160af7c9669dd4d33ceee5b83e831093f1424dc885665d8edced06251b4355e85e5acc7afe62750ce21c28b80275892e9990e48fbc2f5f4567509e74404bef831b603af8196244474edbf8cf7d6650d4a94612c44f717c902637cce88e567c9aaca8668f2dd2a74bd1ef6fc0db7d60043812899205cdff4d2e4a63e47f755097294eddc9e070e4c9c; Path=/; Expires=Tue, 28 Jan 2025 05:58:01 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Tue, 23 Dec 2025 16:38:01 GMT; Secure
tracking_id: 1026d60f9891e6d6b2cff687152bf2
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
e1.o.lencr.org/
95.101.11.115200 OK 345 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash bad9da2a54aa4d03b7167645ea3a0434
a4b5dfc8d0353562b65c275771b4d8b6b60ca26b
e4130ed05c584b38167a386bed7cf8dc64618e5e0a6e831c9dd9e14a853f0fab
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E4130ED05C584B38167A386BED7CF8DC64618E5E0A6E831C9DD9E14A853F0FAB"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17465
Expires: Sun, 29 Jan 2023 10:49:06 GMT
Date: Sun, 29 Jan 2023 05:58:01 GMT
Connection: keep-alive
push.services.mozilla.com/
52.26.236.137101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.26.236.137:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: s5Adb87fFNqQA+Sufvfk/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: knsjeIura9/hdRcGy0FrtPtE4zQ=
tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_testbl2510&sub3=1026d60f9891e6d6b2cff687152bf2&bo=2753%2C2754%2C2755%2C2756
172.67.190.127302 Found 0 B URL HTTP/2 tracking.t0r4.com/click?pid=781&offer_id=1085&sub1=170910&sub2=75077_testbl2510&sub3=1026d60f9891e6d6b2cff687152bf2&bo=2753%2C2754%2C2755%2C2756
IP 172.67.190.127:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=781&offer_id=1085&sub1=170910&sub2=75077_testbl2510&sub3=1026d60f9891e6d6b2cff687152bf2&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1
Host: tracking.t0r4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sun, 29 Jan 2023 05:58:01 GMT
content-length: 0
location: https://zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_testbl2510&campaign=&sum=&clickid=63d60ae9d85e1a0001e48903
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63d60ae9d85e1a0001e48903; expires=Mon, 29 Jan 2024 05:58:01 GMT; secure; SameSite=None
afoffers={"1085":1674971881}; expires=Mon, 29 Jan 2024 05:58:01 GMT; secure; SameSite=None
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WC4QadiYNxeESHZ%2Bc0b1syucT%2BrQGsd%2By%2FVjbwrV5kYMNfTn6OkHQltTMR2eWxphqeDFLkQcz53y4bI3m%2FdR1TH4d7CmQxi8MJEHXdj2vZLi3iHzWRgZiYGsqo8MbHH6p4QvIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790fbbd52f380b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
95.101.11.115200 OK 345 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash bad9da2a54aa4d03b7167645ea3a0434
a4b5dfc8d0353562b65c275771b4d8b6b60ca26b
e4130ed05c584b38167a386bed7cf8dc64618e5e0a6e831c9dd9e14a853f0fab
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E4130ED05C584B38167A386BED7CF8DC64618E5E0A6E831C9DD9E14A853F0FAB"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17465
Expires: Sun, 29 Jan 2023 10:49:06 GMT
Date: Sun, 29 Jan 2023 05:58:01 GMT
Connection: keep-alive
zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_testbl2510&campaign=&sum=&clickid=63d60ae9d85e1a0001e48903
18.184.38.55302 Found 0 B URL HTTP/2 zzotrack.com/381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_testbl2510&campaign=&sum=&clickid=63d60ae9d85e1a0001e48903
IP 18.184.38.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /381f1b1b-7ced-4eef-857b-418b4c176094?pid=781&geo=NO&reff=&sub1=170910&sub2=75077_testbl2510&campaign=&sum=&clickid=63d60ae9d85e1a0001e48903 HTTP/1.1
Host: zzotrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 05:58:02 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wjktimkon6lu158mi1sg1p9m&aff_sub3=170910
pragma: no-cache
set-cookie: 381f1b1b-7ced-4eef-857b-418b4c176094-v4=VlP2qdCt8XGCoeZKXJDFZy0-ipDXvBEfX4tr1KoeRtA; Max-Age=86400; Expires=Mon, 30-Jan-2023 05:58:02 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=SIYKC3nqiN6cpEPlSkdDMrKmt%2FLplY%2F7yGpU%2BR2R6qYlX4jt46C%2FAEo0wrxmdfgxKw5KBourZv4aIxLsDnLPerRHab5HqL9F9QyqmACTA%2FEsIafG1kPoQo7JjOwyFbSuJaiLwNzJbC83w11Ok5MAjQ%3D%3D; Max-Age=31536000; Expires=Mon, 29-Jan-2024 05:58:02 GMT; Domain=zzotrack.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 3885df3c8c958d7f178cdfda32166ca9
bdcde54acd3eec5a23e165da3be6054124365811
360bab32d6b2e08220e2dd760e4fe086395bccdaafb93ba2e3a89dca79238842
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 05:58:02 GMT
Etag: "63d4b72a-1d7"
Server: ECS (dcb/7F5D)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zqiKrTX80Geq-tttAh2r1bRueqIiVbCqgWUoTn5QPc4VBa0iJ9rUrA==
www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wjktimkon6lu158mi1sg1p9m&aff_sub3=170910
34.252.0.95302 Found 403 B URL HTTP/1.1 www.ntr4x.com/aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wjktimkon6lu158mi1sg1p9m&aff_sub3=170910
IP 34.252.0.95:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 536db70bf824847730402ebdce2139d2
196c56b25dcb1a0e31251059b152b1e71560b291
34a1aa12268a70c7135df35cca954947a1bfda2efcec5a5125599540d71554a7
GET /aff_c?offer_id=1672&aff_id=1262&aff_sub2=381f1b1b-7ced-4eef-857b-418b4c176094-781&aff_sub1=wjktimkon6lu158mi1sg1p9m&aff_sub3=170910 HTTP/1.1
Host: www.ntr4x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 29 Jan 2023 05:58:02 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 403
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.våtedrømmer.com/campaign?utm_campaign=6535&utm_term=1028bfc993bdcc77ffafd6ca001dbb&utm_source=170910&utm_content=wjktimkon6lu158mi1sg1p9m&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_1672=ENC03a86317bb1a0f7e247a800fe536155720bf19b0200ff31f455250a017729e17025dcdb6e03d741bad30bc960c5adb5c500db563b7992e322b4b0dca8de753488317f08d352d359864af05b69f1ca51d963364f4a6be8cab9108d5f74465f1d2d15a7a0f0cf3bff361a44e606e52fb02493fa084c6ba0d0481788a71516e0731db854583eaf136f4d9f852b39d504b7440d2867a87a245a4e8dc710b83515611b6442cda0eccb5cad44e253eabd6d4f6381ad72c05d8fd10eaae0d24ef75195662063095d8; expires=Mon, 30 Jan 2023 05:58:02 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Tue, 23 Dec 2025 16:38:02 GMT; path=/; SameSite=None; Secure
Tracking_id: 1028bfc993bdcc77ffafd6ca001dbb
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: e469dc1354795d853f2e91d8e4968432
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3781
Expires: Sun, 29 Jan 2023 07:01:03 GMT
Date: Sun, 29 Jan 2023 05:58:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3781
Expires: Sun, 29 Jan 2023 07:01:03 GMT
Date: Sun, 29 Jan 2023 05:58:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3781
Expires: Sun, 29 Jan 2023 07:01:03 GMT
Date: Sun, 29 Jan 2023 05:58:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ed721e83648418f4a5d64f9d038fd1a
7a311c79e311448941a8d624c1064b1a2d97cfbd
b961e73aaba814eec66532ceeafad5191371fc762b05338990e8cc9c8ecfcbff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6875
x-amzn-requestid: 5fb13e91-8750-4dd9-90a2-f1218ea6009b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fS9t2E0AoAMF_LA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d10ff2-22e819312302377c4bf698ff;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 11:18:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K5USIaSWnvB6PnUOFU_HW7OtgQ2GpOWCDeSubisxUIs3W545amtGlA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 07:59:12 GMT
age: 79130
etag: "7a311c79e311448941a8d624c1064b1a2d97cfbd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61dd48155b70501a72ec13f79745433d
4efc3d15f04a290a590b54122822d55a9d3fa1ca
9345056c111439b34aff08323fc99a2d315fa91293039dc5acf67affb50636d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4202
x-amzn-requestid: d33bee10-9642-4138-8dde-3486ec7f6535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa9ABFFvIAMFbqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d441ff-3b3a99db469e3f8c068d553c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:28:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yBrvQ9Y8bIsIJQcL3F2dZ5djdNlCPtTF6ZGpBmh6FqzZQ3phnA6JGQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:22:43 GMT
age: 2119
etag: "4efc3d15f04a290a590b54122822d55a9d3fa1ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cbbc57c4e469baec1bda006407877cc
e988f007b1f9ec2327e7817f38cf56202096aeae
5237a8a8a7aa1fe59548582abf726fe77ad9e1fad8535bb5f88519dc6e779a86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7cfa685-1688-424d-b352-82b8ce19495a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6158
x-amzn-requestid: f6073f30-9a9c-4674-8ca9-a43e1982ab44
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzV7FHtoAMFRGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce328c-08806a615c478d443f76119f;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:09:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5AeWdtII3LLgHysTJsa4Kn5-SSmF0rkM0uYXZwtpBC0p60eJ_VSjBw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 15:00:59 GMT
age: 53823
etag: "e988f007b1f9ec2327e7817f38cf56202096aeae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 33106
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e59316e1b1333c42d9d120fa88619bc2
669cdc8dfeba9d64f93f260adbb5f493a5649bb0
c4e78ec96322f1f151b07f9a45d51e6ca3fd46613472cf627f53bf399193a533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9398
x-amzn-requestid: 3b2ecbd0-b8ee-415d-9473-32cdd50de777
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: feX-4GNXIAMFuIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5a05f-7015e4eb1410a8022de024d6;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 22:23:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LX-_6oYOx0-UFWzbPAPZIaxNU4Wvvne7p6sUt8Q90kv_PASntoUcIA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:20:22 GMT
age: 9460
etag: "669cdc8dfeba9d64f93f260adbb5f493a5649bb0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6af6f32397882f56d14d22348e44a9f1
5a626376807e7507fa3a204c4e4e9e44aa074a37
478f32e98c0a1f0d62fa337795ca88b7927e14b684b681f7629b648bc2d709a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7417
x-amzn-requestid: 53032353-8613-49b0-944d-3742236cf50c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcMmFeQIAMF3Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340b6-7fe2226327d90db014527c08;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zd8cTO2N1JO-OK3hCDwVO8naClCsg0raJLboRFle-DPSKhR_7k8-Yg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:16:35 GMT
age: 9687
etag: "5a626376807e7507fa3a204c4e4e9e44aa074a37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash e956ad257ea7e0eb2e61b7c31aca2cb3
586bf2b1472d3678d8dcb3070e5b1df460fc369b
4bf5d950fdeb8ec2e4b7fb382357e3e2ef90597b65a5e8d733bbb28afb507da2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 05:58:02 GMT
Server: ECS (dcb/7EA6)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XD0Tv6Pvnhy84sDnmhbqORGBxVVseiH4OJVtw6xb0-uIGQMtFf3QNA==
www.xn--vtedrmmer-52a7s.com/campaign?utm_campaign=6535&utm_term=1028bfc993bdcc77ffafd6ca001dbb&utm_source=170910&utm_content=wjktimkon6lu158mi1sg1p9m&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
54.230.111.127302 Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/campaign?utm_campaign=6535&utm_term=1028bfc993bdcc77ffafd6ca001dbb&utm_source=170910&utm_content=wjktimkon6lu158mi1sg1p9m&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781
IP 54.230.111.127:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /campaign?utm_campaign=6535&utm_term=1028bfc993bdcc77ffafd6ca001dbb&utm_source=170910&utm_content=wjktimkon6lu158mi1sg1p9m&utm_medium=381f1b1b-7ced-4eef-857b-418b4c176094-781 HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate, no-cache="set-cookie"
date: Sun, 29 Jan 2023 05:58:03 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /landingpage
pragma: no-cache
server: nginx/1.22.0
set-cookie: PHPSESSID=3no09fi4u8iims1v47c554dv2v; path=/
AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32521334F883789A80A62052FDE19C0E53F76832DF7AD4ACCE7E110D6737F4464FAA0D0AE9CB49E94B3C75CF4AF869187B48;PATH=/
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gZxFsP1CDNcdm214fNDh0sJ4aW6w5cmdLT1mLB8VvaNEYU5QzjMvXg==
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/landingpage
54.230.111.127302 Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/landingpage
IP 54.230.111.127:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landingpage HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=3no09fi4u8iims1v47c554dv2v; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32521334F883789A80A62052FDE19C0E53F76832DF7AD4ACCE7E110D6737F4464FAA0D0AE9CB49E94B3C75CF4AF869187B48
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate
date: Sun, 29 Jan 2023 05:58:03 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /lp/lp24
pragma: no-cache
server: nginx/1.22.0
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BdRE2Y_-IMVhWHTFsKmDl3IN0_7bcXVBzDXS9ZSjejQZIL7HlonkcQ==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 05:58:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-NVWF78EY0E
142.250.74.168200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-NVWF78EY0E
IP 142.250.74.168:0
File type ASCII text, with very long lines (19467)
Hash 06ace9719b40631c1aa670d6616d8eaa
19d1c934fee1912ab78a67927a2ce9f03fc28564
65d3052eb4d68a440163af2f538b2bb6887045c6e6a8cb568e285c363164e77a
GET /gtag/js?id=G-NVWF78EY0E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Jan 2023 05:58:03 GMT
expires: Sun, 29 Jan 2023 05:58:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77193
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 05:58:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash cbd7682fa014e71bcabff092c043a5aa
ff50357f4673941cd24549e9402a28569aca4cfb
bf3b5ab5290d8e10100fef3575e4ff8382cb41f3da7a6b180abc8c52a30c8aab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 05:58:04 GMT
Etag: "63d26b58-1d7"
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y7c0zVhmOdsG9sBpkI93uwhvOatZ5hRgUZpecoLy3rq5Wzf4YRMrRA==
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash cbd7682fa014e71bcabff092c043a5aa
ff50357f4673941cd24549e9402a28569aca4cfb
bf3b5ab5290d8e10100fef3575e4ff8382cb41f3da7a6b180abc8c52a30c8aab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108137
Date: Sun, 29 Jan 2023 05:58:04 GMT
Etag: "63d50e55-1d7"
Expires: Mon, 30 Jan 2023 12:00:21 GMT
Last-Modified: Sat, 28 Jan 2023 12:00:21 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vFDjWZcLsw8yPXLm3qxzKO2_nOV50V4bFFOTUo8Y8EomrcBWwPqaEg==
media.xn--vtedrmmer-52a7s.com/project/489/logo_dark.png?config=7825
54.230.111.51200 OK 10 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project/489/logo_dark.png?config=7825
IP 54.230.111.51:0
File type PNG image data, 320 x 71, 8-bit/color RGBA, non-interlaced\012- data
Hash dea19df8bf5758e2af9921e166e1420d
4f4610c28f3bad69e8b72d7f6379dcf61f50bd39
2cac0168f0a0c24154662208ee88cfe4213a26fe64c18211fcfcea31f6338b78
GET /project/489/logo_dark.png?config=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10042
date: Mon, 16 Jan 2023 13:17:16 GMT
last-modified: Fri, 13 Nov 2020 10:55:08 GMT
etag: "dea19df8bf5758e2af9921e166e1420d"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JtO3PAzwNjSwTa-Ww7WclR08ZamZyPzgE-ScVsKfRV8orBhuyjBWhg==
age: 1096848
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/css/landingpage/matchm/style.css?version=7825
54.230.111.51200 OK 84 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/css/landingpage/matchm/style.css?version=7825
IP 54.230.111.51:0
File type ASCII text, with very long lines (50442)
Hash 88fc9f004fb667d33f56de0d9e011e49
fbcbbf3c4437b699b26a27ee7059db7fec6cb8bb
2e091e8c984974a9ec9deee6081500857519d245f60d16faa4b15504e6701cb8
GET /css/landingpage/matchm/style.css?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
content-length: 83844
date: Mon, 16 Jan 2023 13:17:16 GMT
last-modified: Mon, 21 Nov 2022 10:58:28 GMT
etag: "88fc9f004fb667d33f56de0d9e011e49"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qd4t3HLcjGvzB2-VJFP2tWoibe_zPfTP0qbTz6IO2WwrOQzzq8QEeA==
age: 1096849
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/landingpage/script.js?version=7825
54.230.111.51200 OK 84 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/landingpage/script.js?version=7825
IP 54.230.111.51:0
File type Unicode text, UTF-8 text, with very long lines (65426)
Hash ce3ccb44a305193a7ab00bfdb69b4e23
c33ded560d8928ee37892bcab8398fac77e2ed07
7f2f658ecf4bd097d730ab77a8513fb1b8b6ca6032b919d6abb0e3be6be210c9
GET /js/landingpage/script.js?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 83821
date: Mon, 16 Jan 2023 13:17:16 GMT
last-modified: Mon, 15 Aug 2022 09:38:18 GMT
etag: "ce3ccb44a305193a7ab00bfdb69b4e23"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6mA-2UPGlOIiKq7k2sMxG8JZqDM5ikCPzOWEzUFrDMom9foM75Ti-A==
age: 1096849
vary: Origin
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash cbd7682fa014e71bcabff092c043a5aa
ff50357f4673941cd24549e9402a28569aca4cfb
bf3b5ab5290d8e10100fef3575e4ff8382cb41f3da7a6b180abc8c52a30c8aab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108137
Date: Sun, 29 Jan 2023 05:58:04 GMT
Etag: "63d50e55-1d7"
Expires: Mon, 30 Jan 2023 12:00:21 GMT
Last-Modified: Sat, 28 Jan 2023 12:00:21 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: s9i6YJU4FoUZaimXiZhZHkQnTGLsvUhNFjQ9OrzTlz3ssYtfkhV9kg==
media.xn--vtedrmmer-52a7s.com/images/landingpage/lp24/casual.jpg?version=7825
54.230.111.51200 OK 109 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/images/landingpage/lp24/casual.jpg?version=7825
IP 54.230.111.51:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 790x882, components 3\012- data
Size 109 kB (108843 bytes)
Hash 6c1f129b57dd522dd6989fb95a6d992e
aa429ca30de9fae42fb106413307fbb7587b063f
721aa0d4ed39a1a9e393e3995e853c48d0e36168b2dbfdd4cd1c460503e350b9
GET /images/landingpage/lp24/casual.jpg?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 108843
date: Mon, 16 Jan 2023 13:19:40 GMT
last-modified: Tue, 18 Aug 2020 08:55:10 GMT
etag: "6c1f129b57dd522dd6989fb95a6d992e"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -L0mN4FPaqpanvx2H0pWJXzWqMtjle-MQH8dN-omvMLJ-8CJMBHRGw==
age: 1096705
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/project/489/favicon.ico?config=7825
54.230.111.51200 OK 4.3 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project/489/favicon.ico?config=7825
IP 54.230.111.51:0
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 56283d52626ba639ee4fc7c0a6c84324
b150126aede65c06da7573ac4488ff0043da0431
9b5bd7e7398519bf0f9dd7e52e05194f2f2d64fc549265400484d98e4b6f4281
GET /project/489/favicon.ico?config=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 4286
date: Mon, 16 Jan 2023 13:17:17 GMT
last-modified: Fri, 13 Nov 2020 10:55:42 GMT
etag: "56283d52626ba639ee4fc7c0a6c84324"
cache-control: max-age=3153600
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nJoYr8Fw0FIyjYxKM_pFFJCJ9eZicCGrX-NV1I3l60bz5cP4Nvk-Sw==
age: 1096848
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/css/project/matchm/style.css?version=7825
54.230.111.51200 OK 98 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/css/project/matchm/style.css?version=7825
IP 54.230.111.51:0
File type ASCII text, with very long lines (53333)
Hash 064699c25e405c0e166d7662c3561761
27fb9b6c67c5a1c09276a71047ab2fbab7ce69d7
1eaa6a6a7e75e343e5fe9f779b7f6502b3b72e5f799bcb01c26f5c5c19a1b52a
GET /css/project/matchm/style.css?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 97544
date: Mon, 16 Jan 2023 13:17:23 GMT
last-modified: Mon, 21 Nov 2022 10:58:32 GMT
etag: "064699c25e405c0e166d7662c3561761"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sAHO5nKlGnUOtc276hOlz60TXuPQWyygmIPNSQPx0a8wGwZOVh1WDw==
age: 1096842
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/manifest/script.js?version=7825
54.230.111.51200 OK 757 B URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/manifest/script.js?version=7825
IP 54.230.111.51:0
File type ASCII text, with very long lines (1532), with no line terminators
Hash 69b7363b2a1c3b6ca1d79b403e0c6c1c
d369fce98ab7c8750527c5c2f64130dda8729dbf
e6e40f36330091e93b7e5a1661e132f5624d5622ddd56c8941f4027101c36067
GET /js/manifest/script.js?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 757
date: Mon, 16 Jan 2023 13:17:23 GMT
last-modified: Thu, 08 Oct 2020 13:26:42 GMT
etag: "69b7363b2a1c3b6ca1d79b403e0c6c1c"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RZZttTKMWSwPz5LQYRU9Dpeo-clpWoQFTF7UHW3XWc4YNZeHKLtiPw==
age: 1096842
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/vendor/script.js?version=7825
54.230.111.51200 OK 236 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/vendor/script.js?version=7825
IP 54.230.111.51:0
File type ASCII text, with very long lines (65433)
Size 236 kB (236255 bytes)
Hash f5ef8833e788ec24ffaac4864a1a9fb6
c4fbc75d56f0269014baf42d5de92ce35f9371f9
9947197e08fb77b400bb6e3294799a442828cb004532c9b7d9872bda9ab16cea
GET /js/vendor/script.js?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 236255
date: Mon, 16 Jan 2023 13:17:23 GMT
last-modified: Mon, 15 Aug 2022 09:38:09 GMT
etag: "f5ef8833e788ec24ffaac4864a1a9fb6"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IiBDd2gVy4JtZQwJlzpDe_du7LvJEMruiuxpuSDxkjYite0-dRfGWQ==
age: 1096842
vary: Origin
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/js/main/script.js?version=7825
54.230.111.51200 OK 37 kB URL HTTP/2 media.xn--vtedrmmer-52a7s.com/js/main/script.js?version=7825
IP 54.230.111.51:0
File type ASCII text, with very long lines (65435)
Hash f1e681a0bb4eb99a76e4fc67ca697e89
c0be4bbc6827461c7b7b4cbf059b160e914fd65a
67e1168eb449f8e436786e6234a78121c4cd500e8b7e445bff775d731a16eeb9
GET /js/main/script.js?version=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36974
date: Mon, 16 Jan 2023 13:17:23 GMT
last-modified: Mon, 15 Aug 2022 09:38:12 GMT
etag: "f1e681a0bb4eb99a76e4fc67ca697e89"
cache-control: max-age=3153600
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HYGqJ4SQtewzqbQcLMA9J4CiSTagtsfKyIl8RdnMwfOJEBJqjDhymg==
age: 1096842
vary: Origin
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/lp/blank.html
54.230.111.127404 Not Found 25 kB URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/blank.html
IP 54.230.111.127:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9332), with CRLF, LF line terminators
Hash f8d05e0a627f833bef8f8477278231b6
64addd0226f1adc8c8a60597a5f91fb2132fe3d2
16f23d3bf2fd38e69ec3d010303db7ccee9e61a00597e35d404bf7d62a3799ec
GET /lp/blank.html HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/lp/lp24
Cookie: PHPSESSID=3no09fi4u8iims1v47c554dv2v; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32521334F883789A80A62052FDE19C0E53F76832DF7AD4ACCE7E110D6737F4464FAA0D0AE9CB49E94B3C75CF4AF869187B48
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Sun, 29 Jan 2023 05:58:04 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Error from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E9q1LS7f3543R6yr1e_6YJCXlG7vYUpraogEByCq8AzAaP3KlZkIKw==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uPJu2SzvWcfqukF9t0PKG5iK7LrTnk1Cn5nioD4MklQgDAZnbiH8Gw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 14:55:48 GMT
age: 54141
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
media.xn--vtedrmmer-52a7s.com/project//logo_dark.png?config=7825
54.230.111.51403 Forbidden 0 B URL HTTP/2 media.xn--vtedrmmer-52a7s.com/project//logo_dark.png?config=7825
IP 54.230.111.51:0
GET /project//logo_dark.png?config=7825 HTTP/1.1
Host: media.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/
Cookie: _ga_NVWF78EY0E=GS1.1.1674971890.1.1.1674971890.0.0.0; _ga=GA1.1.1635578654.1674971891
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Sun, 29 Jan 2023 05:58:04 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L9uOFdRl_ydUZHhcCxnSeKebaNyPAovMPdxj1Fm9FOmDgA3SCBxdmA==
vary: Origin
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/lp/lp24
54.230.111.127200 OK 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/lp24
IP 54.230.111.127:0
GET /lp/lp24 HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=3no09fi4u8iims1v47c554dv2v; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32521334F883789A80A62052FDE19C0E53F76832DF7AD4ACCE7E110D6737F4464FAA0D0AE9CB49E94B3C75CF4AF869187B48
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Sun, 29 Jan 2023 05:58:03 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tdeHF73IW1lF64EWKBzcwHs98ETX6FrXxWtfdTcbcbU_DEXLaQScCQ==
X-Firefox-Spdy: h2
www.xn--vtedrmmer-52a7s.com/lp/blank.html?HistoryLoad
54.230.111.127404 Not Found 0 B URL HTTP/2 www.xn--vtedrmmer-52a7s.com/lp/blank.html?HistoryLoad
IP 54.230.111.127:0
GET /lp/blank.html?HistoryLoad HTTP/1.1
Host: www.xn--vtedrmmer-52a7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.xn--vtedrmmer-52a7s.com/lp/lp24
Cookie: PHPSESSID=3no09fi4u8iims1v47c554dv2v; AWSELB=9585594B06F2E7045FD8B793A1BFD2C40F279A32521334F883789A80A62052FDE19C0E53F76832DF7AD4ACCE7E110D6737F4464FAA0D0AE9CB49E94B3C75CF4AF869187B48; cookies_marketing=1; cookies_analytic=1; _ga_NVWF78EY0E=GS1.1.1674971890.1.1.1674971890.0.0.0; _ga=GA1.1.1635578654.1674971891
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
date: Sun, 29 Jan 2023 05:58:05 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx/1.22.0
x-cache: Error from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pzQMI3MFLpD_L1RVat4q3nn3H5Cz-A7UT2HXW2WSdbii8lLVSH5IjA==
X-Firefox-Spdy: h2