s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
302 Found 243 B URL HTTP/1.1 s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 66f985dd123257a9565c79efebb8c420
664e0ac2f3da6df31249caa40c4abf86d5d11e64
992b17e14e8b1c010ba427b289473391b4dc8c2c336912a1307454edd5941c12
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.tc domain
GET /server12/ipv8xt/LEAREX-DEV-SMS.rar.html HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Thu, 26 Jan 2023 18:36:59 GMT
Server: Apache
Location: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Content-Length: 243
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12912
Expires: Thu, 26 Jan 2023 22:12:11 GMT
Date: Thu, 26 Jan 2023 18:36:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11669
Expires: Thu, 26 Jan 2023 21:51:28 GMT
Date: Thu, 26 Jan 2023 18:36:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 18:35:16 GMT
content-type: application/json
age: 103
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7311
Expires: Thu, 26 Jan 2023 20:38:50 GMT
Date: Thu, 26 Jan 2023 18:36:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N2LWNPwaKbyJJFl8B9u+KOlMIbkxpkZftCdiyfQyRxixkHsSsXBKn/HII+qkPbLGDMLY1ehKLcqv5v8ztjLPqA==
x-amz-request-id: QDCVTT8CDNXDA1QZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 18:20:13 GMT
age: 1006
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:36:59 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
200 OK 5.0 kB URL HTTP/1.1 s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 70ca0aa7ab3389acbbe7f4d7292021b5
2a07058ff7798bf2d718a422debfc97d61d5b074
fd5ca2620521c2d656fc4deababd37de2b327885595680d615ac48922132af74
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.tc domain
GET /server12/ipv8xt/LEAREX-DEV-SMS.rar.html HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:36:59 GMT
Server: Apache
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-9
s6.dosya.tc/style/style.css
200 OK 2.0 kB URL HTTP/1.1 s6.dosya.tc/style/style.css
IP
ASN #24940 Hetzner Online GmbH
File type assembler source, ASCII text
Hash ac278d5531b52b2d9cc32edf71749d43
5685f1c07b37853ce04e029c1e6c3b64f5d2baae
9b3f0f81ca9ca1c387b9940500e893aa22e23751225254fd73367736ec7e3389
GET /style/style.css HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:36:59 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2005
Keep-Alive: timeout=5, max=149
Connection: Keep-Alive
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 17:49:01 GMT
age: 2879
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2aea5a35cba70d81a6dd963879939001
b01460f07580e2f52118b95b0339a1bc2eda8c00
517701bafd7780d4be9149f846a36120d1c0fa426cdc18ce3a5aa7d4890bfeaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "517701BAFD7780D4BE9149F846A36120D1C0FA426CDC18CE3A5AA7D4890BFEAA"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9688
Expires: Thu, 26 Jan 2023 21:18:28 GMT
Date: Thu, 26 Jan 2023 18:37:00 GMT
Connection: keep-alive
s6.dosya.tc/style/bootstrap.css
200 OK 21 kB URL HTTP/1.1 s6.dosya.tc/style/bootstrap.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (540)
Hash 31be671a9cab0b21b4d5879fbfa1c100
115f1f29dacf8dddf74371971b28840fd10b9661
802acd624acac101802644608abc8f5708c664405b97715e7f34649f0bc4f5df
GET /style/bootstrap.css HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20804
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Content-Type: text/css
s6.dosya.tc/images/footer-icon3.png
200 OK 1.7 kB URL HTTP/1.1 s6.dosya.tc/images/footer-icon3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 3a61d85a6bb0a45429b1e4b7d945aa95
6fcdf44c20d1ed269303583e16a98e245fa7b69b
c84a015988434d7fa0c884f5590de727799abacb9c4a4ad6b4cadea4b97ea732
GET /images/footer-icon3.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:38 GMT
Accept-Ranges: bytes
Content-Length: 1702
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/images/uye-girisi.png
200 OK 3.0 kB URL HTTP/1.1 s6.dosya.tc/images/uye-girisi.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 140 x 51, 8-bit/color RGB, non-interlaced\012- data
Hash 6925e8f5c208aae4dd55cadd1340f180
a03365e7fb59c9588b3b7963e18c0b3e5d4cb369
6bfa03e8b7d8249e9927cafe801657559f7b7064248bb970b55fb4b689611f2d
GET /images/uye-girisi.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:41 GMT
Accept-Ranges: bytes
Content-Length: 2979
Keep-Alive: timeout=5, max=149
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/images/footer-icon1.png
200 OK 582 B URL HTTP/1.1 s6.dosya.tc/images/footer-icon1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e62d200d08f565563cc9b713729bbaa6
3a130f79117f2aaa91154eb56a22b47de8c06a50
101d88dc759a5588d5c064fe233b6b19c565966a527a03eb9cdc29c733b8d4c3
GET /images/footer-icon1.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:37 GMT
Accept-Ranges: bytes
Content-Length: 582
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/images/logo.png
200 OK 7.2 kB URL HTTP/1.1 s6.dosya.tc/images/logo.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 191 x 53, 8-bit/color RGB, non-interlaced\012- data
Hash 2a193802d40b18cd55b0d159571bf63c
1a4e4bdf88317471241d9e5ee29d9572be3f37e3
77eba513db8685e5a4b7633684b1d6b175bf8272ccfff3c6a1c0735d37d1d57a
GET /images/logo.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:40 GMT
Accept-Ranges: bytes
Content-Length: 7157
Keep-Alive: timeout=5, max=150
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/images/download-img.png
200 OK 6.8 kB URL HTTP/1.1 s6.dosya.tc/images/download-img.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 313 x 117, 8-bit/color RGB, non-interlaced\012- data
Hash 1edfa391c712325a169fa384adbfbfa7
4ae0807157e873cf80df3a3b0f8b2b67a098b0de
e7cfbf6b7de5e77de00e7376302839e106d3f0ab89637d2af07eb74b86ef4d4f
GET /images/download-img.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:36 GMT
Accept-Ranges: bytes
Content-Length: 6819
Keep-Alive: timeout=5, max=148
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11854
Expires: Thu, 26 Jan 2023 21:54:34 GMT
Date: Thu, 26 Jan 2023 18:37:00 GMT
Connection: keep-alive
s6.dosya.tc/images/footer-icon2.png
200 OK 850 B URL HTTP/1.1 s6.dosya.tc/images/footer-icon2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 51a472b4a51ea9245ee6f4386f07818f
a19e86c411dc6da3592d1f90e89ddf68df1fee3c
eea1befd43d3dc930a0eb0335c56ed8bc7e14aa1ee3e6c546cd21c1826362750
GET /images/footer-icon2.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:37 GMT
Accept-Ranges: bytes
Content-Length: 850
Keep-Alive: timeout=5, max=149
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/images/menu-ayrac.png
200 OK 125 B URL HTTP/1.1 s6.dosya.tc/images/menu-ayrac.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 2 x 52, 8-bit/color RGB, non-interlaced\012- data
Hash 35a0591c63feeb75e3e547e894ff6e2d
7dd00c2e8d4e9203b71d3fcb9a660e717b8dca7c
9700fc9abb23b0fa04c070487f5aebdcec2cbb22f10788ab7898032abe3fcced
GET /images/menu-ayrac.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:40 GMT
Accept-Ranges: bytes
Content-Length: 125
Keep-Alive: timeout=5, max=149
Connection: Keep-Alive
Content-Type: image/png
phicmune.net/zone?pub=0&zone_id=5030740&is_mobile=false&domain=s6.dosya.tc&var=&ymid=&var_3=
200 OK 755 B URL HTTP/2 phicmune.net/zone?pub=0&zone_id=5030740&is_mobile=false&domain=s6.dosya.tc&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (754)
Hash c94e252c82757f1d0b6b25b912551cf8
039a4442e5352240d211065feb2b1938e5033362
31ce4620ea5c952e827654b2f364a4d1bdd937ede7d07d844ca7a3b157138be8
GET /zone?pub=0&zone_id=5030740&is_mobile=false&domain=s6.dosya.tc&var=&ymid=&var_3= HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/
Origin: https://s6.dosya.tc
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/json; charset=utf-8
content-length: 755
x-trace-id: f44a2a233174bc878909f80bd9cf203f
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s6.dosya.tc/images/background.webp
200 OK 113 kB URL HTTP/1.1 s6.dosya.tc/images/background.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1050, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 113 kB (112776 bytes)
Hash 2b08bddebb64127b30bc913f73cdab61
f8911fd91f0302e88e7fe6e089ba20af32269b79
0804b26a6993fc6ee8e977f77aa9ce5ddf9c4fe69773b296cc292ee7b2a5ac1b
GET /images/background.webp HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:35 GMT
Accept-Ranges: bytes
Content-Length: 112776
Keep-Alive: timeout=5, max=148
Connection: Keep-Alive
Content-Type: image/webp
s6.dosya.tc/apple-touch-icon.png
200 OK 6.6 kB URL HTTP/1.1 s6.dosya.tc/apple-touch-icon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash bfd9b50e03f63b25c253a5d6fa5c5ef4
b4c68746da8a1da96b57d37990bfbfb0f716c14b
ca0f27136956761254299ac92d78aecca2c21841760c56904d894eb13ea0237f
GET /apple-touch-icon.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:13 GMT
Accept-Ranges: bytes
Content-Length: 6556
Keep-Alive: timeout=5, max=147
Connection: Keep-Alive
Content-Type: image/png
s6.dosya.tc/favicon-16x16.png
200 OK 1.6 kB URL HTTP/1.1 s6.dosya.tc/favicon-16x16.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 05c5d89a72c5dc5e863e151cc5fa9b68
df5a0242031f54494fe0bf1b2d7290cd5e864a15
cd6cef0b6624ec979018be137e45b606f36c018b2d64cfe7e3d39815c0936a46
GET /favicon-16x16.png HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 15:06:18 GMT
Accept-Ranges: bytes
Content-Length: 1594
Keep-Alive: timeout=5, max=148
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 17:46:59 GMT
expires: Thu, 26 Jan 2023 19:46:59 GMT
cache-control: public, max-age=7200
age: 3001
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4879)
Hash 61ec1c17f2919802ee4efee919c5af9e
40210dab9b7efb36abd7a56e891d78578ce7f274
376188030fbdd0f8223acf08ef42071626821287bf9efb2bc93d586be10436fa
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 26 Jan 2023 18:37:00 GMT
expires: Thu, 26 Jan 2023 18:37:00 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 4091336048927443039
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49783
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
phicmune.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
OPTIONS /custom HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://s6.dosya.tc/
Origin: https://s6.dosya.tc
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lyh97MTRQInHei1XsfqMLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QRilUkbjQhPaQksx1V0+l+/j8wM=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 973d2171d71d95176e0b49c8ff2f9acf
3231a52fa7e9bce8d6d92b80cd042c3f805d4bc0
072b540553a644a48328af59a74f71cd4f600b93c676055b68b11cda3fbbc9e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "072B540553A644A48328AF59A74F71CD4F600B93C676055B68B11CDA3FBBC9E0"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5969
Expires: Thu, 26 Jan 2023 20:16:29 GMT
Date: Thu, 26 Jan 2023 18:37:00 GMT
Connection: keep-alive
phicmune.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert fortinet Malware
POST /custom HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/
Content-Type: application/json
Origin: https://s6.dosya.tc
Content-Length: 398
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 6a07cce0abdc5a8447276847cd6aed0b
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230124/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230124/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20230124/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:54:17 GMT
expires: Thu, 09 Feb 2023 03:54:17 GMT
cache-control: public, max-age=1209600
age: 52963
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s6.dosya.tc/sw.js
404 Not Found 3.6 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 563241c3fff9872bae70b7705ecac0ee
b75b61320b9de9192a9a39fd95cd72c249924c89
eeb45b21f2789967efab4ac9c87376ab34726b4f3c3a826561cdb69c3201f8e0
GET /sw.js HTTP/1.1
Host: s6.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/server12/ipv8xt/LEAREX-DEV-SMS.rar.html
Connection: keep-alive
Cookie: _ga=GA1.2.317470423.1674758220; _gid=GA1.2.663019832.1674758220; _gat=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 26 Jan 2023 18:37:00 GMT
Server: Apache
Keep-Alive: timeout=5, max=146
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-9
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
phicmune.net/pfe/current/tag.min.js?z=5030740
200 OK 157 kB URL HTTP/2 phicmune.net/pfe/current/tag.min.js?z=5030740
IP
Size 157 kB (156664 bytes)
Hash aa29a11db800fe83304f5f73eeca487f
536957df17133013c0e6c4e7b571529e04ede354
46025edee4db483a0ab65368f4ba40af11e1d81aec3c95c814057c95887be15e
GET /pfe/current/tag.min.js?z=5030740 HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 14:02:57 GMT
etag: W/"63d28811-390a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-60205436-1&cid=317470423.1674758220&jid=1439258079&gjid=1506610959&_gid=663019832.1674758220&_u=IEBAAEAAAAAAACAAI~&z=1409593107
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-60205436-1&cid=317470423.1674758220&jid=1439258079&gjid=1506610959&_gid=663019832.1674758220&_u=IEBAAEAAAAAAACAAI~&z=1409593107
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-60205436-1&cid=317470423.1674758220&jid=1439258079&gjid=1506610959&_gid=663019832.1674758220&_u=IEBAAEAAAAAAACAAI~&z=1409593107 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://s6.dosya.tc
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://s6.dosya.tc
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 26 Jan 2023 18:37:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2fd3b5487710791cafa87110d681647a
6f3de59c79cf8f93c3312d917e9bb225a8bb25f9
35c24aa8f70e97185a0a18761f04b283cefecdce3abcd2261ccc6377077730c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C24AA8F70E97185A0A18761F04B283CEFECDCE3ABCD2261CCC6377077730C5"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10386
Expires: Thu, 26 Jan 2023 21:30:06 GMT
Date: Thu, 26 Jan 2023 18:37:00 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 810bf2bf9f302d0a65b1e0b447b549ef
d6ddcc1e64a1392f5942c0fc45864a282a93854e
f61096b63e6f62872d6d30aac7671c72403bba82f4f5c555add8e0997675f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.rtmark.net/gid.js?userId=d1b8baec1a144eef9128f7cee4f8e6b9
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=d1b8baec1a144eef9128f7cee4f8e6b9
IP
File type JSON data\012- , ASCII text
Hash 0979a7e473566c02e81201cbd47e3d79
ca981374b2850a06ee6de0a81ed439d409189f9c
188dc417b9d2747804eccf1da7c175c944ebe0318923a84d5632f92cd874e892
GET /gid.js?userId=d1b8baec1a144eef9128f7cee4f8e6b9 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://s6.dosya.tc
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d1b8baec1a144eef9128f7cee4f8e6b9; expires=Fri, 26 Jan 2024 18:37:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6535ae9529ced8e4fe9cab67dbfbcd06
cd8a01acf3cc5ba2797073d284f5d2f03965ea23
ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 04cb7fc8b1e2a65a0b198cc53eb5e5cd
6d04611612d81108e856467f0e4b0479cbb37d33
1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=s6.dosya.tc
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=s6.dosya.tc
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=s6.dosya.tc HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 18:37:00 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=s6.dosya.tc
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=s6.dosya.tc
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=s6.dosya.tc HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 26 Jan 2023 18:37:00 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6535ae9529ced8e4fe9cab67dbfbcd06
cd8a01acf3cc5ba2797073d284f5d2f03965ea23
ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 04cb7fc8b1e2a65a0b198cc53eb5e5cd
6d04611612d81108e856467f0e4b0479cbb37d33
1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad49c55efa0c0770e45d7ef3f9655505
73e4c458b5f3868ffc9e531213025f6e64c05e22
15bf23fcfa89c3a7a6577af8ef7eaab37bcc400bb3c6bd8aa8607c639616132d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.itskiddien.club/?rb=NeXkA-Gjv2fTGVWJ3FsqSb_6_2Ql78-cMkA1yDfg-kLZ49LawwsMPP3EQ_-eZpkNYr36cWsWzNvHnFnJfyiVeejg5bBON8kkkeMH83DUK3a8CI9aRcSEQwKeJkVV56qhBRExPWI4VgCpr78nmNGjLIUFXK7OaSkR45TV2CXEd847SSS3xqVCimYmxwwZiAzPw5QOFfalHKTAvZ7U5Lf9OoKZRfKFg0jFcgHZVQ%3D%3D&request_ab2=0&zoneid=5426561&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fs6.dosya.tc%2Fserver12%2Fipv8xt%2FLEAREX-DEV-SMS.rar.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=fb7ad3bb-902c-431e-923a-1347607582a9&userId=d1b8baec1a144eef9128f7cee4f8e6b9&m=link
200 OK 2.0 kB URL HTTP/2 cdn.itskiddien.club/?rb=NeXkA-Gjv2fTGVWJ3FsqSb_6_2Ql78-cMkA1yDfg-kLZ49LawwsMPP3EQ_-eZpkNYr36cWsWzNvHnFnJfyiVeejg5bBON8kkkeMH83DUK3a8CI9aRcSEQwKeJkVV56qhBRExPWI4VgCpr78nmNGjLIUFXK7OaSkR45TV2CXEd847SSS3xqVCimYmxwwZiAzPw5QOFfalHKTAvZ7U5Lf9OoKZRfKFg0jFcgHZVQ%3D%3D&request_ab2=0&zoneid=5426561&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fs6.dosya.tc%2Fserver12%2Fipv8xt%2FLEAREX-DEV-SMS.rar.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=fb7ad3bb-902c-431e-923a-1347607582a9&userId=d1b8baec1a144eef9128f7cee4f8e6b9&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2681), with no line terminators
Hash 756a24c9dcf838a56881372db3a99eef
dc18c51bdf4d2077e23af92bbcb1e5fc17b313e1
672cd970d3fe49530865e439a3219c9df464b66815a05c6753020108e9891678
GET /?rb=NeXkA-Gjv2fTGVWJ3FsqSb_6_2Ql78-cMkA1yDfg-kLZ49LawwsMPP3EQ_-eZpkNYr36cWsWzNvHnFnJfyiVeejg5bBON8kkkeMH83DUK3a8CI9aRcSEQwKeJkVV56qhBRExPWI4VgCpr78nmNGjLIUFXK7OaSkR45TV2CXEd847SSS3xqVCimYmxwwZiAzPw5QOFfalHKTAvZ7U5Lf9OoKZRfKFg0jFcgHZVQ%3D%3D&request_ab2=0&zoneid=5426561&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fs6.dosya.tc%2Fserver12%2Fipv8xt%2FLEAREX-DEV-SMS.rar.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=fb7ad3bb-902c-431e-923a-1347607582a9&userId=d1b8baec1a144eef9128f7cee4f8e6b9&m=link HTTP/1.1
Host: cdn.itskiddien.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/
Origin: https://s6.dosya.tc
Connection: keep-alive
Cookie: OAID=d1b8baec1a144eef9128f7cee4f8e6b9; oaidts=1674758220
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/json
x-trace-id: 36fa94b70dac91a6d454ec5926bcb147
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=d1b8baec1a144eef9128f7cee4f8e6b9; expires=Fri, 26 Jan 2024 18:37:00 GMT; path=/; secure; SameSite=None
oaidts=1674758220; expires=Fri, 26 Jan 2024 18:37:00 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Feb 2023 18:37:00 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b336532a53601570200b2eb953adb5ca
37a28478de3093cec9d5071c579c25e5f2600db5
d579247717f58a5739e536a0315d4b2da450709c7172a0c9727ddb851ad98a2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1fca039b34bc82737177821029b88328
6bc87e93e0dcf2c99dad991b25590bdabff87f0c
33515bb7035ae1ce174490de6fcedb2d6cb9feab0346a10bc63dd1d714312878
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1506)
Hash c8e19ab58d75eb01fd735f016f55201f
e3d257ad917d19ae463c29907f36e31e856cad37
52207b7bc66270e84d6bb6c05c6d5a2d2b0d511138073a3d3fe15d7c08119932
GET /pagead/js/r20230124/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 7523
x-xss-protection: 0
date: Wed, 25 Jan 2023 20:39:56 GMT
expires: Wed, 08 Feb 2023 20:39:56 GMT
cache-control: public, max-age=1209600
age: 79025
etag: 641023367890010850
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 49 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3504)
Hash eaf26b8f5900d361a5d447ea72df4752
26b0a44ca382082dde8648abd0a4d949bdf0c664
1334af0b91c26ce21cb75ab69d0c7e9c8ec1f00c0ce946a3689bb9d6fdcc4d37
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 49065
date: Thu, 26 Jan 2023 18:37:01 GMT
expires: Thu, 26 Jan 2023 18:37:01 GMT
cache-control: private, max-age=3000
etag: "1674650782302584"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 42fd2c82d595ae01df2d203113dcf0a5
744da4730ec196f4ed5685002f38efc75c694f21
4a6e33e8052c5300879c4a9f4cbbfb4612e90d5232caa26cfd9883ee9797064e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6250
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 16:52:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 313 B IP
Hash 6daf7fca97f3a987cc96c0d37fd8d4a0
8b24dbdbc3aab8e5197b093800c80aa624717c93
4d21133924c561e7ac910ca2eb0fd7393ea72a56ec8d3a5c98b4d67f4c9a89d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4972
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 17:14:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kOfnDbOzWawC-gGdg2ICAgAAAOnAxNWGjtlUEEzI0mNuJ1ARGcV1YgUSfQASAAAKDkFRVUJBZ1lCQWdFQkFn&wp=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw
200 OK 0 B URL HTTP/2 rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kOfnDbOzWawC-gGdg2ICAgAAAOnAxNWGjtlUEEzI0mNuJ1ARGcV1YgUSfQASAAAKDkFRVUJBZ1lCQWdFQkFn&wp=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kOfnDbOzWawC-gGdg2ICAgAAAOnAxNWGjtlUEEzI0mNuJ1ARGcV1YgUSfQASAAAKDkFRVUJBZ1lCQWdFQkFn&wp=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw HTTP/1.1
Host: rtb.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 283500
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1212952
expires: Tue, 16 Jan 2024 18:37:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xWb6NmYMT2ogib5aB%2BEe%2FBwllt2JbvfN8UZHfKOnL4qRE8QEQY%2FrE9x%2Bj5lxVIVCdTkq3j8IoQ76bN7hkdWs7rUHIK6w2wXuwBapHpH%2FUiv4wk%2FBndn9XDAexWT2XapIhAuEqukA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78fb5b849a8ab4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7a9d8afdc2039e3c57f2978289bc61f8
6a8bacef90357fbe21dce445a5551e861ccec8db
fd8a85970e5e9a2705e30e9879eb66509f29cc450ae0e183e802438da2c74186
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5853
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 16:59:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 7a9d8afdc2039e3c57f2978289bc61f8
6a8bacef90357fbe21dce445a5551e861ccec8db
fd8a85970e5e9a2705e30e9879eb66509f29cc450ae0e183e802438da2c74186
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5853
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 16:59:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
static.criteo.net/design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff
200 OK 21 kB URL HTTP/2 static.criteo.net/design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff
IP
File type Web Open Font Format, TrueType, length 21444, version 1.100\012- data
Hash 20be5fdc3302b5f3d13fca2690afc5ef
1e75a45c81ca3ab4aee08f53c828f60daa21ff58
ed53eeea7846fe89ec2d53b5bf89b34ca78854854abdb469697c63509cc2e0ec
GET /design/dt/f342bdd505994d4ebb138128d448f553_avenirnextltpro.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: text/plain; charset=UTF-8
content-length: 21444
last-modified: Tue, 11 Jun 2019 14:25:37 GMT
etag: "5cffb9e1-53c4"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff
200 OK 34 kB URL HTTP/2 static.criteo.net/design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff
IP
File type Web Open Font Format, CFF, length 34384, version 1.100\012- data
Hash 6ca898ae5c32e1195b576276384b72b1
05e67b45b9e1dcc4e64f02c619978ee7297f3752
38784db79bb7cb8998e180cff575a3d42741bbdbbeda1aad281c653089b193b1
GET /design/dt/1662e641d7d74eeb886a0ffc41a660df_avenirnextltpro-regular.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: text/plain; charset=UTF-8
content-length: 34384
last-modified: Tue, 11 Jun 2019 14:25:37 GMT
etag: "5cffb9e1-8650"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA&u=%7Ct5oPWi0iQMAKuyLyO3qoFySjhDJylBq%2FTI1LjyWMckc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKQHlyfo233Bl3FrFAAeqMXtXbj7j2wxAcFBmVAsAwrt7Dz4PhO-jHrkK1I0a-7aE_QSbbeylIILO6dzc_xlWYdaH8wL81g7spvtwftaJuicXOvU-8q_gVIqiqp5298SnaCcEUi87oeq4-W-dSMETrPaPVIpC1KWUxB44XyaxQFptSzwueMOhHNC3aA7Ij2McFByPNqWwS5ruEi3-31062rPMuYsLVk60j4c3KiD0L8B02E9NakM1SfQPD5TVs2ezMVOQSAGsrxj_eKHX3dtp2KURBy62-QLwTZTzD2fbY9ZS6y8xk9HQwLs6QszQWhQF5AchQDgRBD2cHxuaq-xuLjxHWWXiqUXwwlGD50TE8xxu8gK9CiMCz3IToWDWAbeNJNAjylzUG4p4y3TKFunIKDvAyY8M01fCnDyyG3mNVv9ZlnBglzPv1NXoJP2b8c0KDMAgMcyAqGjK2L6wBQhzHLBDIJIeAom69fegkMwHO7V3Pg8PLD2XBWsgejrWP9b6U&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCyXpbTMjSY_HGPOGb78EP_6S02AbJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTk3NzUyNzU0MjYwNzM4MzfIAQmpAlrbiDGaNbI-qAMBqgT1AU_Qo43Wb8VCkCS2LfYtz44hHkX2XXbR8MGIasWW4p9al_IjOcQC4yt4n0MOprwBoP4u1hn8wVJl1Ldf-igqOvZ-1Vucf4Wbwb6njeDHlSVNPyz3NyMBA5hDAw-pABY80jHH9C3mDC4VV5i9ZPTXbxUEVMTkAcmeG0KIkv74QQ9HANyudceGAEZzJxLQtfYawxYBO4KqwuD6b4TB0n_o0H4wQc2b4A2V-16JECuvzMeDtkqryi3XmRqwEyANjKPR9J3lbV_meTg1tajgciC2C_lbtsUA6uDeRMvZdqUSy6Qaj9jYJzGvZj53csP_1WfPEd5bz7r3gAb-19uxzNXYw9sBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3s9OGwCizJqCOCDoMFnfUm2EZxzQ%26client%3Dca-pub-9775275426073837%26adurl%3D
200 OK 83 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA&u=%7Ct5oPWi0iQMAKuyLyO3qoFySjhDJylBq%2FTI1LjyWMckc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKQHlyfo233Bl3FrFAAeqMXtXbj7j2wxAcFBmVAsAwrt7Dz4PhO-jHrkK1I0a-7aE_QSbbeylIILO6dzc_xlWYdaH8wL81g7spvtwftaJuicXOvU-8q_gVIqiqp5298SnaCcEUi87oeq4-W-dSMETrPaPVIpC1KWUxB44XyaxQFptSzwueMOhHNC3aA7Ij2McFByPNqWwS5ruEi3-31062rPMuYsLVk60j4c3KiD0L8B02E9NakM1SfQPD5TVs2ezMVOQSAGsrxj_eKHX3dtp2KURBy62-QLwTZTzD2fbY9ZS6y8xk9HQwLs6QszQWhQF5AchQDgRBD2cHxuaq-xuLjxHWWXiqUXwwlGD50TE8xxu8gK9CiMCz3IToWDWAbeNJNAjylzUG4p4y3TKFunIKDvAyY8M01fCnDyyG3mNVv9ZlnBglzPv1NXoJP2b8c0KDMAgMcyAqGjK2L6wBQhzHLBDIJIeAom69fegkMwHO7V3Pg8PLD2XBWsgejrWP9b6U&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCyXpbTMjSY_HGPOGb78EP_6S02AbJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTk3NzUyNzU0MjYwNzM4MzfIAQmpAlrbiDGaNbI-qAMBqgT1AU_Qo43Wb8VCkCS2LfYtz44hHkX2XXbR8MGIasWW4p9al_IjOcQC4yt4n0MOprwBoP4u1hn8wVJl1Ldf-igqOvZ-1Vucf4Wbwb6njeDHlSVNPyz3NyMBA5hDAw-pABY80jHH9C3mDC4VV5i9ZPTXbxUEVMTkAcmeG0KIkv74QQ9HANyudceGAEZzJxLQtfYawxYBO4KqwuD6b4TB0n_o0H4wQc2b4A2V-16JECuvzMeDtkqryi3XmRqwEyANjKPR9J3lbV_meTg1tajgciC2C_lbtsUA6uDeRMvZdqUSy6Qaj9jYJzGvZj53csP_1WfPEd5bz7r3gAb-19uxzNXYw9sBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3s9OGwCizJqCOCDoMFnfUm2EZxzQ%26client%3Dca-pub-9775275426073837%26adurl%3D
IP
Hash bc8e74f2568f3e352717f682a9c57e3e
ce88ee4f4ec40c5e8c5e1b668a21f662b766423b
3ea99b0babb57a1ef3c1b6d0bb8c2a559fde1fa3aa70910f4f0c61ebdf4fd8e5
GET /delivery/r/afr.php?z=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA&u=%7Ct5oPWi0iQMAKuyLyO3qoFySjhDJylBq%2FTI1LjyWMckc%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVKQHlyfo233Bl3FrFAAeqMXtXbj7j2wxAcFBmVAsAwrt7Dz4PhO-jHrkK1I0a-7aE_QSbbeylIILO6dzc_xlWYdaH8wL81g7spvtwftaJuicXOvU-8q_gVIqiqp5298SnaCcEUi87oeq4-W-dSMETrPaPVIpC1KWUxB44XyaxQFptSzwueMOhHNC3aA7Ij2McFByPNqWwS5ruEi3-31062rPMuYsLVk60j4c3KiD0L8B02E9NakM1SfQPD5TVs2ezMVOQSAGsrxj_eKHX3dtp2KURBy62-QLwTZTzD2fbY9ZS6y8xk9HQwLs6QszQWhQF5AchQDgRBD2cHxuaq-xuLjxHWWXiqUXwwlGD50TE8xxu8gK9CiMCz3IToWDWAbeNJNAjylzUG4p4y3TKFunIKDvAyY8M01fCnDyyG3mNVv9ZlnBglzPv1NXoJP2b8c0KDMAgMcyAqGjK2L6wBQhzHLBDIJIeAom69fegkMwHO7V3Pg8PLD2XBWsgejrWP9b6U&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCyXpbTMjSY_HGPOGb78EP_6S02AbJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTk3NzUyNzU0MjYwNzM4MzfIAQmpAlrbiDGaNbI-qAMBqgT1AU_Qo43Wb8VCkCS2LfYtz44hHkX2XXbR8MGIasWW4p9al_IjOcQC4yt4n0MOprwBoP4u1hn8wVJl1Ldf-igqOvZ-1Vucf4Wbwb6njeDHlSVNPyz3NyMBA5hDAw-pABY80jHH9C3mDC4VV5i9ZPTXbxUEVMTkAcmeG0KIkv74QQ9HANyudceGAEZzJxLQtfYawxYBO4KqwuD6b4TB0n_o0H4wQc2b4A2V-16JECuvzMeDtkqryi3XmRqwEyANjKPR9J3lbV_meTg1tajgciC2C_lbtsUA6uDeRMvZdqUSy6Qaj9jYJzGvZj53csP_1WfPEd5bz7r3gAb-19uxzNXYw9sBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YAQEAEyAqoCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3s9OGwCizJqCOCDoMFnfUm2EZxzQ%26client%3Dca-pub-9775275426073837%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 127358979
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/49287/221222/5d3ef21d911b42008515279e2289a812_cpn_300x250_1.png
200 OK 15 kB URL HTTP/2 static.criteo.net/design/dt/49287/221222/5d3ef21d911b42008515279e2289a812_cpn_300x250_1.png
IP
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash d0382a7cc4e931a7a64338538c85b37c
8794c428ec5e05c715937c399b38a9caaf17a2df
13025aaaa55bb834bec8042fd8d5a3fb7b84e1e7e8059c651b67f38981f84a3f
GET /design/dt/49287/221222/5d3ef21d911b42008515279e2289a812_cpn_300x250_1.png HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/png
content-length: 14646
last-modified: Thu, 22 Dec 2022 01:10:41 GMT
etag: "63a3ae91-3936"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 6.0 kB URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
Hash 6d698246a815aeefafd980b9382d00d6
a8dab2572aaade8389fcfa19d058c47673964910
b59c1395436ccf3c48e4f91d91151def554518d80b87b391ae783c4805ea4d6f
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5537
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 17:04:44 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5529
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 17:04:52 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5537
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 17:04:44 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash db6a4124fb8821f75add42c999a78f25
b0ae384e4209dacda86bb7fe86f0b3f400dc2a46
63b7150437e85b755b83a1dbd4cea2cb05f18aa2f5bd631508d557c874980e08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5537
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:01 GMT
Last-Modified: Thu, 26 Jan 2023 17:04:44 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kOfnDbOzWe0HfJ2DYgICAAAA5qQ9elzqGyEQTMjSY6ex8Njsy1YA1xVXABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA
200 OK 0 B URL HTTP/2 rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kOfnDbOzWe0HfJ2DYgICAAAA5qQ9elzqGyEQTMjSY6ex8Njsy1YA1xVXABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kOfnDbOzWe0HfJ2DYgICAAAA5qQ9elzqGyEQTMjSY6ex8Njsy1YA1xVXABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=Y9LITAAPI3ECO83hAA0Sf5I5AIlbexXiAviTGA HTTP/1.1
Host: rtb.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 208183
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022776%2Fretina_detail.jpg&v=3&w=400&s=nSvyiCSIpwIGibSVKKe2wu7x&b=400
200 OK 31 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022776%2Fretina_detail.jpg&v=3&w=400&s=nSvyiCSIpwIGibSVKKe2wu7x&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x396, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d848bba9c13dfd3e120c640506dc2e14
013d3590c6a1ed6779faa21fa34934c875090e12
904e72be6d4d98f19ecb1fb89ebfd397243e28782e8c26dfd50451142679993f
GET /img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022776%2Fretina_detail.jpg&v=3&w=400&s=nSvyiCSIpwIGibSVKKe2wu7x&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=76703
expires: Fri, 27 Jan 2023 15:55:24 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 30714
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=800&s=SIH7MoiJ4XxqatZcKyGp-zJJ&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=800&s=SIH7MoiJ4XxqatZcKyGp-zJJ&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x327, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 35e0ec7b541db61713c6bcf742eac3cc
f9ed9bcd3c53e470869503df1b28c7366b444d25
7351253701a67d6bb94c525eaba21b3d704c4d6cdc4beb5b84d7d2e16152e284
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=800&s=SIH7MoiJ4XxqatZcKyGp-zJJ&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2229958
expires: Tue, 21 Feb 2023 14:03:00 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10832
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025651%2Fretina_detail.jpg&v=3&w=800&s=SGvviRDw0S6yDnaYcfgiP2Q9&b=400
200 OK 9.9 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025651%2Fretina_detail.jpg&v=3&w=800&s=SGvviRDw0S6yDnaYcfgiP2Q9&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x280, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c4a70fe53b6e0c5e008e26d8a6f4b4c
8c068531a3e26ee2b5d5892202be9dd5ea12aa64
4dd4d7777fb1c1545f51dd6e2054c97be94841196318f57beac08ec8f6b284ae
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025651%2Fretina_detail.jpg&v=3&w=800&s=SGvviRDw0S6yDnaYcfgiP2Q9&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=148058
expires: Sat, 28 Jan 2023 11:44:40 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 9888
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7638
Expires: Thu, 26 Jan 2023 20:44:19 GMT
Date: Thu, 26 Jan 2023 18:37:01 GMT
Connection: keep-alive
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=400
200 OK 16 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x353, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1c59505b9c074da424a4c3b1c95c172b
53b106db6127b3bff38b4d22218b460fb7367af9
1cefc6c875d9f2480c842768e3f8b4ab526d58ccef92e60d80777973e8fb6ac7
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025967%2Fretina_detail.jpg&v=3&w=800&s=jnbhycbnUFFgTvQESwYy3nCc&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1081746
expires: Wed, 08 Feb 2023 07:06:08 GMT
date: Thu, 26 Jan 2023 18:37:00 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 16182
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=244&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2Fc29299740dc844b3928ba7cf064abaa5_logo_n_horizontal.png&v=3&w=196&s=d-b9vIzqJxpXea6bCrJXn-Yy
200 OK 5.8 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=244&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2Fc29299740dc844b3928ba7cf064abaa5_logo_n_horizontal.png&v=3&w=196&s=d-b9vIzqJxpXea6bCrJXn-Yy
IP
File type PNG image data, 196 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 6052ba86b289ae7332c71c9ce9fbab24
d749df66dbc0054f736439fb5191ff7779e3aec6
e9c5f0f484fb54d79c1584ca36220ae01360f5117d2de7165bfd35a92f2895f0
GET /img/img?h=244&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2Fc29299740dc844b3928ba7cf064abaa5_logo_n_horizontal.png&v=3&w=196&s=d-b9vIzqJxpXea6bCrJXn-Yy HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=28458441
expires: Fri, 22 Dec 2023 03:44:23 GMT
date: Thu, 26 Jan 2023 18:37:00 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 5842
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7638
Expires: Thu, 26 Jan 2023 20:44:19 GMT
Date: Thu, 26 Jan 2023 18:37:01 GMT
Connection: keep-alive
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000023372%2Fretina_detail.jpg&v=3&w=800&s=twCB59GxWg81OIEoaqRPigoz&b=400
200 OK 12 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000023372%2Fretina_detail.jpg&v=3&w=800&s=twCB59GxWg81OIEoaqRPigoz&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x274, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e515957e9528672592ed69eacdfa0816
7975086a45e5141b0e788d1f0fb1f44e5ef4773f
0ac24e3236fabe6fbecebd5eac5151f80ac9444f5ead7e433018883bc50ae6d2
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000023372%2Fretina_detail.jpg&v=3&w=800&s=twCB59GxWg81OIEoaqRPigoz&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2574355
expires: Sat, 25 Feb 2023 13:42:57 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11580
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7638
Expires: Thu, 26 Jan 2023 20:44:19 GMT
Date: Thu, 26 Jan 2023 18:37:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7638
Expires: Thu, 26 Jan 2023 20:44:19 GMT
Date: Thu, 26 Jan 2023 18:37:01 GMT
Connection: keep-alive
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000021726%2Fretina_detail.jpg&v=3&w=800&s=gZrYBJPZB2E-7dieYYF1RFJg&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000021726%2Fretina_detail.jpg&v=3&w=800&s=gZrYBJPZB2E-7dieYYF1RFJg&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x345, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash de1eab9736b87d0a1839397b52e7d11d
bdb31d972ac412f189a4e4b2cb5a19f76e3fc2ac
f63599885eb000adf8d220e11a80ce4ea95d7d95780ccd15c13e94481801487d
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000021726%2Fretina_detail.jpg&v=3&w=800&s=gZrYBJPZB2E-7dieYYF1RFJg&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2589285
expires: Sat, 25 Feb 2023 17:51:47 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 13862
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026107%2Fretina_detail.jpg&v=3&w=800&s=bDpt_qvGTZ3ywgV0855EE_9U&b=400
200 OK 15 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026107%2Fretina_detail.jpg&v=3&w=800&s=bDpt_qvGTZ3ywgV0855EE_9U&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x331, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0bd456b3b6a600d1daed54b7c5ff7d98
226f35b99eb9c4bfa0b9c6e97604b098d4834288
ad2a944ba098b7209597385de291f0e7fd25071ceae4759a10905d0e12b7a7f7
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026107%2Fretina_detail.jpg&v=3&w=800&s=bDpt_qvGTZ3ywgV0855EE_9U&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1334388
expires: Sat, 11 Feb 2023 05:16:50 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 14624
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026176%2Fretina_detail.jpg&v=3&w=800&s=Cffx7P17Bf3DkOYDB4QqEMbR&b=400
200 OK 8.7 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026176%2Fretina_detail.jpg&v=3&w=800&s=Cffx7P17Bf3DkOYDB4QqEMbR&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 253x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash efeed0a5ff978bdb48993a95d4889210
de2a1f241ac678a4f34e3e6380c1cdb3ffd784d8
db4303dcf9961afe866e80720c5df4296c802462f322e1964a1fb1a9226bd075
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026176%2Fretina_detail.jpg&v=3&w=800&s=Cffx7P17Bf3DkOYDB4QqEMbR&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1358416
expires: Sat, 11 Feb 2023 11:57:17 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8708
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=400
200 OK 8.1 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x293, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a9a15315550fed18a62556c27bfa5978
7b968fc99e5410749a72bb81fe619470f87a202b
338c7da866cc36b7bffe945e1fc92b53e4ee8be07714af48334a097d42c330d9
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000026119%2Fretina_detail.jpg&v=3&w=800&s=4VuDzQialT8i2Y-_mSPFpe_E&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=319952
expires: Mon, 30 Jan 2023 11:29:34 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8052
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 74673
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=800&s=29JgnOZa-ChYJQ_uIKsW8XZL&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=800&s=29JgnOZa-ChYJQ_uIKsW8XZL&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x292, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b6abeb9ca6d67f1359473f1c94b054fd
2247a5e2b4e047d376b80c7d2c4a0f9a1370c0b0
2bf0333d7edee80321b900abc4b515f6be6826b6f16172d8b2bc02ed1fd8fc16
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=800&s=29JgnOZa-ChYJQ_uIKsW8XZL&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1786223
expires: Thu, 16 Feb 2023 10:47:25 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10252
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000010793%2Fretina_detail.jpg&v=3&w=800&s=x--3PK1tZ2kjjSjm3lCHGMCw&b=400
200 OK 8.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000010793%2Fretina_detail.jpg&v=3&w=800&s=x--3PK1tZ2kjjSjm3lCHGMCw&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x275, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a785c079d1375c8af9d07c58107c4faa
f0efc4e2955c0e60182a5b0740dff4c0bd61cdaa
fa5bd70c887f878b9ce741d8390a695c637b2574a56a03c4b149f29d0ce02618
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000010793%2Fretina_detail.jpg&v=3&w=800&s=x--3PK1tZ2kjjSjm3lCHGMCw&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2559460
expires: Sat, 25 Feb 2023 09:34:42 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8008
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Q-kz6GkBHp82E__crWSeqbfxme8c9y1BAAq3TW8NlwJy4eSy7gy7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:07 GMT
age: 74874
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022935%2Fretina_detail.jpg&v=3&w=800&s=EiJeBGfFNETF7rSsfy2GhH-N&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022935%2Fretina_detail.jpg&v=3&w=800&s=EiJeBGfFNETF7rSsfy2GhH-N&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76e861ae8b7577b5985f451440944905
d03fd776d2bb0a5b3adfd1cfeabd9f98f9983edb
defc15ea143ff1d67f8f3241e551682bb4d598644142aadb0829e9b50edb40b2
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000022935%2Fretina_detail.jpg&v=3&w=800&s=EiJeBGfFNETF7rSsfy2GhH-N&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=51008
expires: Fri, 27 Jan 2023 08:47:10 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 13890
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000024143%2Fretina_detail.jpg&v=3&w=800&s=eEjvRyAmm6pMAhA5PSxi6IHq&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000024143%2Fretina_detail.jpg&v=3&w=800&s=eEjvRyAmm6pMAhA5PSxi6IHq&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x307, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 731583f36548a33a7dd6ea5f4cac2b22
40f66a150dafd844ac73e1e35eb13d07bb4cc700
c548da73d4f69056622cb2fa008b0f3c77c5ea296d8beb97a990ed6fa0533530
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000024143%2Fretina_detail.jpg&v=3&w=800&s=eEjvRyAmm6pMAhA5PSxi6IHq&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=46552
expires: Fri, 27 Jan 2023 07:32:54 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10406
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 653bf5a34e9f99c9eef73a21d98d792f
c70d46aa2210c4f7c397fa20e1225b7d0734ac35
9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: 77d12b56-c121-4d0a-9831-9de4151b65de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUY8_GVUIAMFmgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a1ec-523a2d8b1028a4496a211030;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i_OHKx9OPaP8_2ydfgZwY4Dvbq208pXR2hwFTdUySwjsIwEIcv-M4g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:18 GMT
age: 74863
etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020872%2Fretina_detail.jpg&v=3&w=800&s=e21_lR6TxqVin6I1Iw6JNZE-&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020872%2Fretina_detail.jpg&v=3&w=800&s=e21_lR6TxqVin6I1Iw6JNZE-&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x257, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2fc0c01ee42fdc682881e98fca4b9562
d8ae0ef3d1b95ff0afac98af8c0c7d24f115d957
864ecc913d23fd4ba75e948625dad15f26b3d70a0f711f5273e7da94b7c6de36
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020872%2Fretina_detail.jpg&v=3&w=800&s=e21_lR6TxqVin6I1Iw6JNZE-&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2574194
expires: Sat, 25 Feb 2023 13:40:16 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10150
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000012523%2Fretina_detail.jpg&v=3&w=800&s=ZAaLqs-9BsZdkP-z1hkHb5kR&b=400
200 OK 6.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000012523%2Fretina_detail.jpg&v=3&w=800&s=ZAaLqs-9BsZdkP-z1hkHb5kR&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x241, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ddf5f964d8aeffcde7351135ac08430e
1fae1964f19af5287a71d76c6a9579abcc257674
7f7c3294d32387f622db2d90893c91dfc1f0d6426a8ee44d34b296a7f2c20eb4
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000012523%2Fretina_detail.jpg&v=3&w=800&s=ZAaLqs-9BsZdkP-z1hkHb5kR&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2574309
expires: Sat, 25 Feb 2023 13:42:11 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6028
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 74841
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mjK4GJ3UCEuHk4XqmXdZCWHTVvJeX8Z2HFaem2GYzqfqlPSd_h6DfA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 05:14:39 GMT
age: 48142
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x288, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 667fb0b4c67f0a2de8948699be61782f
539c23674411a81c7980b1e1f67f96fd86d863a0
2ccf5826587f4ddc6021bbef0d21ab5f5ca0ae2e62f546635570cfb74bc1b5e7
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000020998%2Fretina_detail.jpg&v=3&w=800&s=ht0jU-d7mGQ67fv963pJMXva&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2548109
expires: Sat, 25 Feb 2023 06:25:31 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11256
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f62e9b7bdca82d18c945851912d8fea8
a7ca44d337c43bc5c6145b26778661c71cc50484
5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:37 GMT
age: 74844
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025451%2Fretina_detail.jpg&v=3&w=800&s=d9wkpNpmGPfPuE1UmGjI0Q0X&b=400
200 OK 12 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025451%2Fretina_detail.jpg&v=3&w=800&s=d9wkpNpmGPfPuE1UmGjI0Q0X&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x314, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash be83b817c3550e71841900483cbca310
9de60c4c4780d5a4dc08d07cdbb668be481fcae2
50deed65f1f1bac1db0c261e3b11a1fe1e8078fbada3ab08f5ee336e4192e5ba
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025451%2Fretina_detail.jpg&v=3&w=800&s=d9wkpNpmGPfPuE1UmGjI0Q0X&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=2307366
expires: Wed, 22 Feb 2023 11:33:08 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11572
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=400&s=TL2xM2-HRWz9Li7ViwuKjKDv&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=400&s=TL2xM2-HRWz9Li7ViwuKjKDv&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x292, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b6abeb9ca6d67f1359473f1c94b054fd
2247a5e2b4e047d376b80c7d2c4a0f9a1370c0b0
2bf0333d7edee80321b900abc4b515f6be6826b6f16172d8b2bc02ed1fd8fc16
GET /img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025169%2Fretina_detail.jpg&v=3&w=400&s=TL2xM2-HRWz9Li7ViwuKjKDv&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1786223
expires: Thu, 16 Feb 2023 10:47:25 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10252
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=400&s=xmCdZB9Wz1EDTdyEBV9QPo2-&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=400&s=xmCdZB9Wz1EDTdyEBV9QPo2-&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x327, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 35e0ec7b541db61713c6bcf742eac3cc
f9ed9bcd3c53e470869503df1b28c7366b444d25
7351253701a67d6bb94c525eaba21b3d704c4d6cdc4beb5b84d7d2e16152e284
GET /img/img?c=3&cq=256&h=400&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025145%2Fretina_detail.jpg&v=3&w=400&s=xmCdZB9Wz1EDTdyEBV9QPo2-&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=2229958
expires: Tue, 21 Feb 2023 14:03:00 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10832
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000019202%2Fretina_detail.jpg&v=3&w=800&s=h-l_42pLKHtIc4ozj5Pbu5RY&b=400
200 OK 9.5 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000019202%2Fretina_detail.jpg&v=3&w=800&s=h-l_42pLKHtIc4ozj5Pbu5RY&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x290, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8ab312f603194dc255d2fde4b392005f
8904fa058bcb3b2feb5cb01250b2599ae4247c60
a109e3dfb08c556154f88398c348000a9f3b51255908869a519cf76ab4f3439b
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000019202%2Fretina_detail.jpg&v=3&w=800&s=h-l_42pLKHtIc4ozj5Pbu5RY&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=163917
expires: Sat, 28 Jan 2023 16:08:59 GMT
date: Thu, 26 Jan 2023 18:37:00 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 9544
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=76&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2F7049720d23064d109149dbb75fb40a80_logo_n_horizontal.png&v=3&w=596&s=N--smCdX0W3F2r7eKPWUTdEn
200 OK 7.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=76&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2F7049720d23064d109149dbb75fb40a80_logo_n_horizontal.png&v=3&w=596&s=N--smCdX0W3F2r7eKPWUTdEn
IP
File type PNG image data, 228 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash c5bf6888482716d825f8cc28e40e90be
231925bf1f67ce409da25298f38f3f9fdff6df05
271e6e5e9e5bb6b8d45d1e2a451398e2f122359c2ac150dbb58ee109de54d3af
GET /img/img?h=76&m=0&partner=49287&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F24217%2F180626%2F7049720d23064d109149dbb75fb40a80_logo_n_horizontal.png&v=3&w=596&s=N--smCdX0W3F2r7eKPWUTdEn HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=28556328
expires: Sat, 23 Dec 2023 06:55:49 GMT
date: Thu, 26 Jan 2023 18:37:00 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 7015
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025043%2Fretina_detail.jpg&v=3&w=800&s=efseKCzeKgBjvqXgMqdAccEH&b=400
200 OK 8.7 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025043%2Fretina_detail.jpg&v=3&w=800&s=efseKCzeKgBjvqXgMqdAccEH&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x329, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5d937499beea5de767a65e01e08d0185
6ca4983b1236f9104b60a63b0bf08ea7ff72155a
66c524eb882b3a6079535b1e13957afc48b6d68f2a9ca9349b581b0733dcd970
GET /img/img?c=3&cq=256&h=800&m=0&partner=49287&q=80&r=0&u=https%3A%2F%2Fwww.fluevog.com%2Fcode%2Fimages%2Fcolour_image%2F0000025043%2Fretina_detail.jpg&v=3&w=800&s=efseKCzeKgBjvqXgMqdAccEH&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=82351
expires: Fri, 27 Jan 2023 17:29:33 GMT
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8710
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
phicmune.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert fortinet Malware
POST /custom HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/
Content-Type: application/json
Origin: https://s6.dosya.tc
Content-Length: 762
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:02 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4b9d990abd6b512332dec05213195d7f
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e53b1d8b1f244c97e073382328e5c650
d1933a186c3b5351a8539f18e3f4f74237aefccc
2b3e14ffcd8e42c946fc8a66a44a97e543849ac1fd3fdefd85f774c86839716e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 18:37:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 514 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash a70507c5c00ad831206b50230fc3a6ac
8ebe4f3f597a0e6267b28d71082c2810b4312779
952c6efec260558a9b659549897536245f12d9774893c0460551421010a3f9e5
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s6.dosya.tc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 26 Jan 2023 18:37:02 GMT
date: Thu, 26 Jan 2023 18:37:02 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-G6iHu_XS1-a_R_WraIGBJQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 514
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=u9m6uiVpj2RNdVpqh28oppji1hJMHPcsA_7oauQNC4vf1eJACDhAn7ZvBsYy1N6GSoa2cttoDx4OhnPEAAjymNlMb5--GaxLP6uDmMvloIOYuHlV30mHSVkvuzzehHvycpSqQloK0qhVrLxVlT8yo3cyPsJvvAoN8NRH9AnstLOVsuhBr5O2KwrB1TqzdIIQjjmUh3ZMWMw1-IhIG-ctS2l2whm3zwibVF5wlwr2iaH9mQYZ93ANBcxWkfmP4LTrELMPzw&sds=2&rev=84429&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=u9m6uiVpj2RNdVpqh28oppji1hJMHPcsA_7oauQNC4vf1eJACDhAn7ZvBsYy1N6GSoa2cttoDx4OhnPEAAjymNlMb5--GaxLP6uDmMvloIOYuHlV30mHSVkvuzzehHvycpSqQloK0qhVrLxVlT8yo3cyPsJvvAoN8NRH9AnstLOVsuhBr5O2KwrB1TqzdIIQjjmUh3ZMWMw1-IhIG-ctS2l2whm3zwibVF5wlwr2iaH9mQYZ93ANBcxWkfmP4LTrELMPzw&sds=2&rev=84429&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=u9m6uiVpj2RNdVpqh28oppji1hJMHPcsA_7oauQNC4vf1eJACDhAn7ZvBsYy1N6GSoa2cttoDx4OhnPEAAjymNlMb5--GaxLP6uDmMvloIOYuHlV30mHSVkvuzzehHvycpSqQloK0qhVrLxVlT8yo3cyPsJvvAoN8NRH9AnstLOVsuhBr5O2KwrB1TqzdIIQjjmUh3ZMWMw1-IhIG-ctS2l2whm3zwibVF5wlwr2iaH9mQYZ93ANBcxWkfmP4LTrELMPzw&sds=2&rev=84429&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:02 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=_df3ZLTSIHMD8I_mWFN91L2DjvGlgITiVSiR7A9CkXwYI9OZYrBKnqZ8wXcpEItkjpxs91pXiluu3O91mK8cXboPChzxi39amONMgAv2Bt_FeRhKc0vdfzokio-qBj3V4oVBXFqMgpqnXHBEqZsT_SnCxTZMTnYvUZXisNhzN8Lq18hjHnq-wFrhirp8dJZyNqCV56CH9pouvPKjDtsinILDkHeDqLwVfxOyOLp5iI9a7EcFaQZA7LsSJrpsm2y2CRXOYRsOWWwQ5xVBd_Oz6lNaPyM2-8EMzeMvq7Nue3x8s0Wgld5f9PRAtdNLU3iNEsTzjh5ANXYugXTc_4jaoQJkwA5X91RILcuNNNvp31pI6J4GrzZ3V_sOxHF9MYf-NOllsteloAqud7yo01XMBpvT4o5j4QPPkR0Qxd5Xahm1iv6f
200 OK 43 B URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=_df3ZLTSIHMD8I_mWFN91L2DjvGlgITiVSiR7A9CkXwYI9OZYrBKnqZ8wXcpEItkjpxs91pXiluu3O91mK8cXboPChzxi39amONMgAv2Bt_FeRhKc0vdfzokio-qBj3V4oVBXFqMgpqnXHBEqZsT_SnCxTZMTnYvUZXisNhzN8Lq18hjHnq-wFrhirp8dJZyNqCV56CH9pouvPKjDtsinILDkHeDqLwVfxOyOLp5iI9a7EcFaQZA7LsSJrpsm2y2CRXOYRsOWWwQ5xVBd_Oz6lNaPyM2-8EMzeMvq7Nue3x8s0Wgld5f9PRAtdNLU3iNEsTzjh5ANXYugXTc_4jaoQJkwA5X91RILcuNNNvp31pI6J4GrzZ3V_sOxHF9MYf-NOllsteloAqud7yo01XMBpvT4o5j4QPPkR0Qxd5Xahm1iv6f
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /delivery/lg.php?cppv=3&cpp=_df3ZLTSIHMD8I_mWFN91L2DjvGlgITiVSiR7A9CkXwYI9OZYrBKnqZ8wXcpEItkjpxs91pXiluu3O91mK8cXboPChzxi39amONMgAv2Bt_FeRhKc0vdfzokio-qBj3V4oVBXFqMgpqnXHBEqZsT_SnCxTZMTnYvUZXisNhzN8Lq18hjHnq-wFrhirp8dJZyNqCV56CH9pouvPKjDtsinILDkHeDqLwVfxOyOLp5iI9a7EcFaQZA7LsSJrpsm2y2CRXOYRsOWWwQ5xVBd_Oz6lNaPyM2-8EMzeMvq7Nue3x8s0Wgld5f9PRAtdNLU3iNEsTzjh5ANXYugXTc_4jaoQJkwA5X91RILcuNNNvp31pI6J4GrzZ3V_sOxHF9MYf-NOllsteloAqud7yo01XMBpvT4o5j4QPPkR0Qxd5Xahm1iv6f HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 3169410
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=fBwIrCVpj2RNdVpq4pZ24FhxEtVPl8UVPSnft-U8ossYHuHwWrXMGf01iZdq1Jgvp5I4GJ4yaJXvf_-7I6EH0l6vDeCyGXcDPvJ4Qa5zbCz2olUM12hd1__6lzBNlIZ0IPv7BwMUmG_7yskIixBpw5rhOOmg2BvTXti7t58MSDu8ZY_PW__Hpez6w5nHhTNFd7_0KYIsleMfackLZbg2sE2rsWohCv2eiZVR9gU9W03cixfxSdgu9DjQvQYAdWc5XDURPQ&sds=2&rev=84429&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:03 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
phicmune.net/pfe/current/universal.min.js?v=3.1.414
200 OK 0 B URL HTTP/2 phicmune.net/pfe/current/universal.min.js?v=3.1.414
IP
GET /pfe/current/universal.min.js?v=3.1.414 HTTP/1.1
Host: phicmune.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s6.dosya.tc/
Origin: https://s6.dosya.tc
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:00 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 14:02:57 GMT
etag: W/"63d28811-18c6c"
access-control-allow-origin: https://s6.dosya.tc
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw&u=%7Ct5oPWi0iQMBoMOFfxSWfYPuGQZLflDNiM1VhPSeZx8s%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVINeW2kxwdGz0awptMFamHeVgALj198P_owLwErIFt_gJH9tespmvJKrVBvOK9ALdb5vxDzWVKFRvmXc2vOwz-AARAaaF9E8TNWA0_4MR672kwDMuq5Gg16qttD4mDtl07x1jWh4S8l7mjMVlMuv2wYS-kTFBYTU8JHE9cKinbjcK7H-6j6BRDVTlErhJk7HKNX0seqggcMSGglmr1JNLiHDkDWdNFaV2X7CKb-n_mFQam1EyphQUqabHCU_u1LNUnU0ivQbnjKR7ETYeNEdLPSTLQkdUlgQl2-wkjb40tn_Imw1HGTgvfYqPduAoaTZ1IY99ntHg5nKLTebnC0yeNOiE63llM96pTZ0usBBb1MIpqeOHVCQ-8SFa21AK0uzaEpPGBngsQDPGNoLO5KrjgFVvb1-T2HB5a4iDydzn_N-wpg8f-d-DeSDo-cCQYAiEP3oQnEeoMQ1kr-3esBwtuxxMgj5BX5hL-Aj0x8NQFfGgRKBLdX5DnihgOk5pz8Fuo&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCjkyuTMjSY62oPIGb7gS84LWYAsme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTc3NTI3NTQyNjA3MzgzN8gBCakCYFwDHvNKsj6oAwGqBPQBT9A4LJfrPdOfgcgmQfJ_sNGsYVsUvzmDIFd8d1Pil2oIIuEIOzdWosVq0NhHg20-3hqPymo4A2CX-Krc6VS4AneRElAIYGo9UvUUzz3l9VC1X-0XdU3oDlvtRYPSZh_tmvVRE8XG-_z4tBC9GSmAwErd0vcgsdogaJ597uhbXToXEBprnnI2vds1TE8ta3VfGX2V8_5wmworx__XQl4yhTxL9ghYYI58d84HqRyRDqKVh-hd9OSobdp1UTCJKBob2lEcvEQUHpMI0oNzOrROGo_rvidEdbRDZIpmyedOL1Vq0cX28o8rLN30VP3myHiOYE9Ww4AG_tfbsczV2MPbAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_3_LN1_fgXcwTuOLUth16v6OhSQLQ%26client%3Dca-pub-9775275426073837%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw&u=%7Ct5oPWi0iQMBoMOFfxSWfYPuGQZLflDNiM1VhPSeZx8s%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVINeW2kxwdGz0awptMFamHeVgALj198P_owLwErIFt_gJH9tespmvJKrVBvOK9ALdb5vxDzWVKFRvmXc2vOwz-AARAaaF9E8TNWA0_4MR672kwDMuq5Gg16qttD4mDtl07x1jWh4S8l7mjMVlMuv2wYS-kTFBYTU8JHE9cKinbjcK7H-6j6BRDVTlErhJk7HKNX0seqggcMSGglmr1JNLiHDkDWdNFaV2X7CKb-n_mFQam1EyphQUqabHCU_u1LNUnU0ivQbnjKR7ETYeNEdLPSTLQkdUlgQl2-wkjb40tn_Imw1HGTgvfYqPduAoaTZ1IY99ntHg5nKLTebnC0yeNOiE63llM96pTZ0usBBb1MIpqeOHVCQ-8SFa21AK0uzaEpPGBngsQDPGNoLO5KrjgFVvb1-T2HB5a4iDydzn_N-wpg8f-d-DeSDo-cCQYAiEP3oQnEeoMQ1kr-3esBwtuxxMgj5BX5hL-Aj0x8NQFfGgRKBLdX5DnihgOk5pz8Fuo&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCjkyuTMjSY62oPIGb7gS84LWYAsme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTc3NTI3NTQyNjA3MzgzN8gBCakCYFwDHvNKsj6oAwGqBPQBT9A4LJfrPdOfgcgmQfJ_sNGsYVsUvzmDIFd8d1Pil2oIIuEIOzdWosVq0NhHg20-3hqPymo4A2CX-Krc6VS4AneRElAIYGo9UvUUzz3l9VC1X-0XdU3oDlvtRYPSZh_tmvVRE8XG-_z4tBC9GSmAwErd0vcgsdogaJ597uhbXToXEBprnnI2vds1TE8ta3VfGX2V8_5wmworx__XQl4yhTxL9ghYYI58d84HqRyRDqKVh-hd9OSobdp1UTCJKBob2lEcvEQUHpMI0oNzOrROGo_rvidEdbRDZIpmyedOL1Vq0cX28o8rLN30VP3myHiOYE9Ww4AG_tfbsczV2MPbAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_3_LN1_fgXcwTuOLUth16v6OhSQLQ%26client%3Dca-pub-9775275426073837%26adurl%3D
IP
GET /delivery/r/afr.php?z=Y9LITAAPFC0Km42BAA1wPIsZ9D2pIsQnKW7wIw&u=%7Ct5oPWi0iQMBoMOFfxSWfYPuGQZLflDNiM1VhPSeZx8s%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVINeW2kxwdGz0awptMFamHeVgALj198P_owLwErIFt_gJH9tespmvJKrVBvOK9ALdb5vxDzWVKFRvmXc2vOwz-AARAaaF9E8TNWA0_4MR672kwDMuq5Gg16qttD4mDtl07x1jWh4S8l7mjMVlMuv2wYS-kTFBYTU8JHE9cKinbjcK7H-6j6BRDVTlErhJk7HKNX0seqggcMSGglmr1JNLiHDkDWdNFaV2X7CKb-n_mFQam1EyphQUqabHCU_u1LNUnU0ivQbnjKR7ETYeNEdLPSTLQkdUlgQl2-wkjb40tn_Imw1HGTgvfYqPduAoaTZ1IY99ntHg5nKLTebnC0yeNOiE63llM96pTZ0usBBb1MIpqeOHVCQ-8SFa21AK0uzaEpPGBngsQDPGNoLO5KrjgFVvb1-T2HB5a4iDydzn_N-wpg8f-d-DeSDo-cCQYAiEP3oQnEeoMQ1kr-3esBwtuxxMgj5BX5hL-Aj0x8NQFfGgRKBLdX5DnihgOk5pz8Fuo&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCjkyuTMjSY62oPIGb7gS84LWYAsme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTc3NTI3NTQyNjA3MzgzN8gBCakCYFwDHvNKsj6oAwGqBPQBT9A4LJfrPdOfgcgmQfJ_sNGsYVsUvzmDIFd8d1Pil2oIIuEIOzdWosVq0NhHg20-3hqPymo4A2CX-Krc6VS4AneRElAIYGo9UvUUzz3l9VC1X-0XdU3oDlvtRYPSZh_tmvVRE8XG-_z4tBC9GSmAwErd0vcgsdogaJ597uhbXToXEBprnnI2vds1TE8ta3VfGX2V8_5wmworx__XQl4yhTxL9ghYYI58d84HqRyRDqKVh-hd9OSobdp1UTCJKBob2lEcvEQUHpMI0oNzOrROGo_rvidEdbRDZIpmyedOL1Vq0cX28o8rLN30VP3myHiOYE9Ww4AG_tfbsczV2MPbAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_3_LN1_fgXcwTuOLUth16v6OhSQLQ%26client%3Dca-pub-9775275426073837%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=u9m6uiVpj2RNdVpqh28oppji1hJMHPcsA_7oauQNC4vf1eJACDhAn7ZvBsYy1N6GSoa2cttoDx4OhnPEAAjymNlMb5--GaxLP6uDmMvloIOYuHlV30mHSVkvuzzehHvycpSqQloK0qhVrLxVlT8yo3cyPsJvvAoN8NRH9AnstLOVsuhBr5O2KwrB1TqzdIIQjjmUh3ZMWMw1-IhIG-ctS2l2whm3zwibVF5wlwr2iaH9mQYZ93ANBcxWkfmP4LTrELMPzw"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 86236734
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=s7jkLf_tgtRZSadEdVDr8Gxc-PpbXxQZbYJ6AG1pr4jHw1QEay1Z-SZ7wnLkuaXX4qhh7R5_wnaJIcT4VBGV7ODI0OldGZLJ3y-nw4keVWJ53to7RA-DkPG0zCQO9dVV18dKngrtn512ed8NVb2NArP_o9PztuvqmogKtXmMF0ambvmEJNmF0gCn2zFtLIFKQZ4cDENV2ijoimhZ_Kgs0MCSSJ4MAMyEJavdqXe-MCgtXHpMqPZg8tTSsAIGEEb53Avy7itG0b2ykM19EYy0kGeO3wL0C60qoh-UI6K4ngFU74JDO-YD54X0odEuDpgPnWk7TX3fNl4DWNQvB0oRNpfb4xOrbLFFBdzA6UYd2ndm7XMapzXV9qDh5CWFsiOaBBLBmATJzxndXqeUhthgBRL1FBSd0oocrZjzjDEA_KdgFVQJ
200 OK 0 B URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=s7jkLf_tgtRZSadEdVDr8Gxc-PpbXxQZbYJ6AG1pr4jHw1QEay1Z-SZ7wnLkuaXX4qhh7R5_wnaJIcT4VBGV7ODI0OldGZLJ3y-nw4keVWJ53to7RA-DkPG0zCQO9dVV18dKngrtn512ed8NVb2NArP_o9PztuvqmogKtXmMF0ambvmEJNmF0gCn2zFtLIFKQZ4cDENV2ijoimhZ_Kgs0MCSSJ4MAMyEJavdqXe-MCgtXHpMqPZg8tTSsAIGEEb53Avy7itG0b2ykM19EYy0kGeO3wL0C60qoh-UI6K4ngFU74JDO-YD54X0odEuDpgPnWk7TX3fNl4DWNQvB0oRNpfb4xOrbLFFBdzA6UYd2ndm7XMapzXV9qDh5CWFsiOaBBLBmATJzxndXqeUhthgBRL1FBSd0oocrZjzjDEA_KdgFVQJ
IP
GET /delivery/lg.php?cppv=3&cpp=s7jkLf_tgtRZSadEdVDr8Gxc-PpbXxQZbYJ6AG1pr4jHw1QEay1Z-SZ7wnLkuaXX4qhh7R5_wnaJIcT4VBGV7ODI0OldGZLJ3y-nw4keVWJ53to7RA-DkPG0zCQO9dVV18dKngrtn512ed8NVb2NArP_o9PztuvqmogKtXmMF0ambvmEJNmF0gCn2zFtLIFKQZ4cDENV2ijoimhZ_Kgs0MCSSJ4MAMyEJavdqXe-MCgtXHpMqPZg8tTSsAIGEEb53Avy7itG0b2ykM19EYy0kGeO3wL0C60qoh-UI6K4ngFU74JDO-YD54X0odEuDpgPnWk7TX3fNl4DWNQvB0oRNpfb4xOrbLFFBdzA6UYd2ndm7XMapzXV9qDh5CWFsiOaBBLBmATJzxndXqeUhthgBRL1FBSd0oocrZjzjDEA_KdgFVQJ HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2697084
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/adchoices_en.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/adchoices_en.svg
IP
GET /flash/icon/adchoices_en.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:27:58 GMT
etag: W/"5e42b9ee-759"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 18:37:01 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Sun, 21 Jan 2024 18:37:01 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
157.90.180.51
142.250.74.162
139.45.195.8
23.36.76.226
178.250.2.135
104.17.25.14