file.io/33n9affgaupw.zip
302 Found 98 B IP
File type HTML document, ASCII text, with no line terminators
Hash e7e7f90c5abf82dc398c1c05573dd23a
c4b6c5107f0628530c0b136bdff5abe5f8a846fc
4a3d04a1c4616ffe1438c8d0a3faae8b53e16d8fbff216eecbea5204716500ab
GET /33n9affgaupw.zip HTTP/1.1
Host: file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 10 Jan 2023 18:05:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 98
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Cache-Control,Authorization,Content-Type,X-reqed-With,x-requested-with
Access-Control-Allow-Methods: GET,HEAD,POST,PUT,PATCH,DELETE
Access-Control-Expose-Headers: X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset
Retry-After: 60
X-RateLimit-Limit: 1
X-RateLimit-Remaining: 9
X-RateLimit-Reset: 2023-01-10T18:06:08.730Z
Location: https://www.file.io/deleted
Vary: Accept
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e6b7a72139d0ef7688330456e9be9a4c
e130a94e7d531768300071764dd1e81fee5bbbcb
d3818afd1493030105341b4cfb91037acbf27085c96068b3ef91c5071277c8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3818AFD1493030105341B4CFB91037ACBF27085C96068B3EF91C5071277C8E5"
Last-Modified: Mon, 09 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12694
Expires: Tue, 10 Jan 2023 21:36:42 GMT
Date: Tue, 10 Jan 2023 18:05:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f67827b21be68d925837dd729590f2d
dc24511141f5352e496b300d7d7e81b0cffb7475
afb1850e7c16f02d267a1310f1681367ecf598816fc62bd02447ffcd26117a9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFB1850E7C16F02D267A1310F1681367ECF598816FC62BD02447FFCD26117A9F"
Last-Modified: Mon, 09 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3400
Expires: Tue, 10 Jan 2023 19:01:48 GMT
Date: Tue, 10 Jan 2023 18:05:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 10 Jan 2023 17:41:44 GMT
content-type: application/json
age: 1404
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 718fc486cd6a70fcacc1653759703fae
bf60ba7a37d2deef1b7000e91cc88da586bb75ca
398d02e16da466ffe87b64ac34b007615951cca14d43610b4acd58bc2a5fadff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "398D02E16DA466FFE87B64AC34B007615951CCA14D43610B4ACD58BC2A5FADFF"
Last-Modified: Tue, 10 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13306
Expires: Tue, 10 Jan 2023 21:46:54 GMT
Date: Tue, 10 Jan 2023 18:05:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WxedddZskeZWs+xW2vxFC+KX6txj5UVI2Biqj+zZ101+gxCJQxs0V44YGhED3liHur8xGXMStkE=
x-amz-request-id: K86ABPK5RK372AEC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 10 Jan 2023 17:16:42 GMT
age: 2906
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jan 2023 18:05:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 10 Jan 2023 17:33:45 GMT
age: 1884
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7e0cbc047592b9717a109caebdacf898
362d034705b1075f31395808f6c7f28c074880d3
46540b7be1d9af9229c0a09914379049a739e22e4917eee313a77c2685e4d4a7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150592
Date: Tue, 10 Jan 2023 18:05:09 GMT
Etag: "63bd5215-1d7"
Expires: Thu, 12 Jan 2023 11:55:01 GMT
Last-Modified: Tue, 10 Jan 2023 11:55:01 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PBp_CtI_aFexY0IvzjiLPoHmpRxrI3Lgu4rxH4vf92bH-jZWqGhU6w==
ocsp.digicert.com/
200 OK 471 B IP
Hash a831a999b5e598b4e9f4e31e8054ca7c
9971a4a806f48777ae6d9525085d16d0c6314c51
cdffa8dd48e75baa98670f82dfac2b3948667ca32dd93f469d2cd49d3a58581c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1257
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:09 GMT
Last-Modified: Tue, 10 Jan 2023 17:44:12 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.file.io/static/Inter.var-c2fe3cb2b7c746f7966a973d869d21c3.woff2
200 OK 325 kB URL HTTP/2 www.file.io/static/Inter.var-c2fe3cb2b7c746f7966a973d869d21c3.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 324864, version 1.0\012- data
Size 325 kB (324864 bytes)
Hash 8dd26c3dd0125fb16ce19b8f5e8273fb
f919da7384706d6924f10d56ce258129ed498845
85f08b5f51e36ca7e961a033c6bb61d7f0e44aa0984646383ecac648e98fdcc8
GET /static/Inter.var-c2fe3cb2b7c746f7966a973d869d21c3.woff2 HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 324864
x-amz-id-2: dmIYTSuQD2VqtBeSPFuY73fYpsovTkJP9iCHx0/oDLAlN/R6sTM0kBDyLqycNHmfGCRYZqMXSLU=
x-amz-request-id: F85MB0GAF45FXG3Q
date: Wed, 07 Dec 2022 02:09:51 GMT
last-modified: Wed, 23 Nov 2022 15:26:47 GMT
etag: "8dd26c3dd0125fb16ce19b8f5e8273fb"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3hFWx1fmYZnELOd9HzKTTi_w-NtR023EI5GZXpGq7ad5RsJyIUa1yw==
age: 2994919
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6b11b6253aaf522320ab85bcb5a7ae3e
12caaeaf823a0ce97549d4bf2cc727c135313b22
6539b16feab0102e166ffb63e5a5f8dc2e917053d430f093f4e99687ce716324
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 2cd044ce8c327b9bf530307eac724a41
cf07894822ff84d11505c6253a1f2162a28d29f3
54b1c44c574e93ad9d23fe3503365679dcc1ba7e40d133a6780ebbbb42a493cc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:09 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 10 Jan 2023 01:28:25 GMT
Expires: Tue, 17 Jan 2023 01:28:24 GMT
Etag: "cf07894822ff84d11505c6253a1f2162a28d29f3"
Cache-Control: max-age=544394,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756d7c80db4f3-OSL
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 10 Jan 2023 16:41:08 GMT
expires: Tue, 10 Jan 2023 18:41:08 GMT
cache-control: public, max-age=7200
age: 5041
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.file.io/page-data/deleted/page-data.json
200 OK 152 B URL HTTP/2 www.file.io/page-data/deleted/page-data.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 728a4f433ef9bed1433eaa226cad06d0
d11dd8bfb88d158862a89fd6ca40054c53e2e77a
6741ba37050e6f42390fa4ce19efe5f2760490a010d7b1c613cd0707df88e3e5
GET /page-data/deleted/page-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 152
x-amz-id-2: mHueheIMN4cqk2MHqznUQW5/Lwz85nqEdyaVbStPrk0XZ/H8OCRX3ZBf7aZPARpxiGtGlX53p18=
x-amz-request-id: T47HX6XCSKM5A2XJ
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
date: Tue, 10 Jan 2023 05:06:29 GMT
etag: "728a4f433ef9bed1433eaa226cad06d0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LWhcgfi06Wk2wBI8WP973EIKqoSGrAZgHWRhdFrihY0IXg88xXrPyw==
age: 46721
X-Firefox-Spdy: h2
www.file.io/page-data/app-data.json
200 OK 50 B URL HTTP/2 www.file.io/page-data/app-data.json
IP
File type JSON data\012- , ASCII text
Hash 8560808e9c37804e4c72d09857f5dca0
413e8d8efb84f1e83f1a5345ffc4025370cd9a17
5485f7c109c1e517093f2b972c6cae2deebbb0e998691d0f3143ccaa2c705a63
GET /page-data/app-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 50
x-amz-id-2: ej/64q0x24nKY5gZwk6HBm49UCfUd5yJKR3owXAc1sJgEu4EOy9eeMazjrlS2ovCwO8ceBOswlA=
x-amz-request-id: PKXGV8SGP5TJM952
date: Tue, 10 Jan 2023 04:43:57 GMT
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
etag: "8560808e9c37804e4c72d09857f5dca0"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KqcQizCb7m5ThHw8FG0Y9_6Uad2UpCI2FyV8dFon4VVwKHiQBTVTFw==
age: 48072
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6b11b6253aaf522320ab85bcb5a7ae3e
12caaeaf823a0ce97549d4bf2cc727c135313b22
6539b16feab0102e166ffb63e5a5f8dc2e917053d430f093f4e99687ce716324
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DkWXh7vtuKhLsTsmSj3ppw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ded1tzjXYBjZkiGNiJ9bHN2y6y8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 385fbe651dc747111b979f40f9583702
a69fa58ffc6e2b15222f17ad6345b2bec9d75106
c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19799
Expires: Tue, 10 Jan 2023 23:35:08 GMT
Date: Tue, 10 Jan 2023 18:05:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 385fbe651dc747111b979f40f9583702
a69fa58ffc6e2b15222f17ad6345b2bec9d75106
c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19799
Expires: Tue, 10 Jan 2023 23:35:08 GMT
Date: Tue, 10 Jan 2023 18:05:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 385fbe651dc747111b979f40f9583702
a69fa58ffc6e2b15222f17ad6345b2bec9d75106
c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19799
Expires: Tue, 10 Jan 2023 23:35:08 GMT
Date: Tue, 10 Jan 2023 18:05:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff038f7ab-fdd3-455e-a50e-bd980a481620.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff038f7ab-fdd3-455e-a50e-bd980a481620.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bf7d09fffbdeb29c81e49c453009cf3c
5ebf09afd40909e132ea7e5f2532a558ee954f0b
e3e76a07a199dfcb42fda159438fff7f4496030f4e2bcadc7d069a0682363468
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff038f7ab-fdd3-455e-a50e-bd980a481620.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9694
x-amzn-requestid: 9d46f93f-99be-4101-a6cd-442d76487afa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZ0XzEYlIAMFiqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba3431-35988d5f0e3eb97443d02dbe;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 03:10:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VxHmDSFdC7OXcDDMRx8UPVSW1_8hf2yUptRD-hMJ7vAQQVJALYyLkA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 04:09:32 GMT
age: 50137
etag: "5ebf09afd40909e132ea7e5f2532a558ee954f0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafe713be-1c84-4820-ac74-bdcf12a854d4.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafe713be-1c84-4820-ac74-bdcf12a854d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0fb07eed296f5106e7b0f40702adddc2
24f637156c37dce6ee8c94f40ce41c1f6ce57dca
ed656dadbcc659a4342b1c04d615adb92ef8a5f69092225e04890400951dddf3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafe713be-1c84-4820-ac74-bdcf12a854d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12190
x-amzn-requestid: 3ab3f00d-2464-445e-8004-9efc440798e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: efo63HseIAMFgMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bc8845-584746e11b0c570a215e5221;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 21:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qA2BDyF32p8pcA707GqHU-azEz16PtztjVgIJ-2BBZNQo5tWDENcrQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 21:54:28 GMT
age: 72641
etag: "24f637156c37dce6ee8c94f40ce41c1f6ce57dca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.file.io/page-data/sq/d/1655680770.json
200 OK 447 B URL HTTP/2 www.file.io/page-data/sq/d/1655680770.json
IP
File type JSON data\012- , ASCII text, with very long lines (447), with no line terminators
Hash c839c57483bd5d788408e7fc88e7cc8d
cab3b9fef4d0858c7d37d0a75a7f9b38ba229ac7
d2b39ffcc4994277d64afbdc2fdf1f9320dd33207dba07a324f21a1bb67d4a27
GET /page-data/sq/d/1655680770.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 447
x-amz-id-2: 2APnUOo80qabFC06rjy6xOns1GbxM/7EbbJvFyFao4jPINeoT1GGY0ZbqWQyrZ0VCVq6dHxAnLg=
x-amz-request-id: TVTQ7NV9WM88RPMD
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
date: Tue, 10 Jan 2023 01:15:11 GMT
etag: "c839c57483bd5d788408e7fc88e7cc8d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HRCJQUpIAnBt-ZR9ifZiImWNcs6yoKHWbvyfDA93CgZH-FVgXK6gQA==
age: 60599
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaa8f015-6153-411e-ba89-a5e40b12f27e.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaa8f015-6153-411e-ba89-a5e40b12f27e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1427567eaf5a33fbade40a49afb785eb
d36efd23bf0846e93cf459bc745ac65801ae7536
b865810ab68ec856e11596e68437368e8bbacf84623d2f7668a7154993a6caf1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaa8f015-6153-411e-ba89-a5e40b12f27e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14830
x-amzn-requestid: 70cae51a-4d22-40d5-a96e-5b4fd2e73aa7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: efoXvFXBoAMFyYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bc8764-31043df63b816c8d7055bd67;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 21:30:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kShQM7MM5tbOc9jonjpRsu1TKsu98kax6DLPIp84bNWK_Fb3T-f4ng==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 21:53:45 GMT
age: 72684
etag: "d36efd23bf0846e93cf459bc745ac65801ae7536"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22aaa4ec-a3a2-40cd-b0a6-2727e078bd89.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22aaa4ec-a3a2-40cd-b0a6-2727e078bd89.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e93c4504f211614e76206db4ef758cb2
933bd495fcfd2d39ad13f1f5d0aba5a0a3a677bf
f3bde37de7ecbfbcd7c52e39178625760af7c86ffeaa6a68eb2ad1462e9a8be6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22aaa4ec-a3a2-40cd-b0a6-2727e078bd89.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9743
x-amzn-requestid: d4290427-ed0d-4805-9e4e-57bf21ea8813
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: efpx3FBroAMFZYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bc89a5-6d54f5317723f2602860c410;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 21:39:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YkH9Kc-hD0HIRIekBKzkeKwKU3quoCQiijvSWyMtWVxqRuwMCbjcbQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 21:54:28 GMT
age: 72641
etag: "933bd495fcfd2d39ad13f1f5d0aba5a0a3a677bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231b20e9-b883-4d22-a499-0edffa21d837.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231b20e9-b883-4d22-a499-0edffa21d837.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4753795f36012ff993f492314aa210ec
d5c8f6896fda40fc34dbc7554ce1ece173dd2d09
cbf28b1d51aae0e01fbe9228bfb1afead400ca7cc69875ffaef573f9e068a51f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231b20e9-b883-4d22-a499-0edffa21d837.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9052
x-amzn-requestid: 51cb3d41-07e4-499a-b7a7-b4ee4963c587
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: efp7aGB-oAMF-0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bc89e2-7bb9960c3f0116240e5ba086;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 21:40:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Q3YFShpJVvVInome7uge_EV1ORl4EdK9AW2lXaBfnFeBtnTCtOSf-A==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 21:53:46 GMT
age: 72683
etag: "d5c8f6896fda40fc34dbc7554ce1ece173dd2d09"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2ee5ce15ae1fb9e70f7d88b93dab4619
172975d7941afc06a9c2f3773532cfd0db281b51
6a4788b5c350dec24b3bb28b30547db0cde30dd8bf8a0a7e5964d57935d1b177
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5013
Cache-Control: max-age=90094
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Etag: "63bc522f-117"
Expires: Wed, 11 Jan 2023 19:06:44 GMT
Last-Modified: Mon, 09 Jan 2023 17:43:11 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
www.file.io/e82996df-3c73e38611643c5bb219.js
200 OK 15 kB URL HTTP/2 www.file.io/e82996df-3c73e38611643c5bb219.js
IP
File type ASCII text, with very long lines (50851)
Hash 66eab492a6eeb87d0f04cb1f69efda5f
b04c52db57dbf0edb50d561785b713bed399bdb3
49c71e5b05e241b81c9b0609b29bc21c36e6447193bc99108fa57a37e04186bc
GET /e82996df-3c73e38611643c5bb219.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: dwLWQTPZWos46TVQtFuwPYI5kCpsgShzomChSdNTuNk7mAuroHi/xbBeKgFPIm9siyRbvwvI8wI=
x-amz-request-id: 0PBSXFH02D0G33K1
date: Sat, 10 Dec 2022 00:37:34 GMT
last-modified: Wed, 23 Nov 2022 15:26:43 GMT
etag: W/"785aafc2bda0f767992456b4ba1b0627"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 50CPGuBxppJNQcwO_AANG6D2zaRgk9BOXzU3_jjuXuADENGyiaIqnA==
age: 2741256
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdvCEZyZqodQX-KZsUu0VfOoknSSd5B2KgBWHbSza-ZdK-Zej6I9wvTANpRpHiW2iY-jpw972COXfyxvo5TKPxqSQA
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 22 Dec 2022 14:34:23 GMT
cache-control: public, max-age=86400
age: 1657847
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=INcV%2BVLGJB8sDA1L7aqBxl3kYcDMD6mA7%2BdKLWleixlGdvxArg8TgcXma1A3Kz3%2FQ%2FygPX8Irtkxzl0nwSL1tXOdoEMMLI2y7zkH0FGiFxetBMkAnxBuMwCgHDmwtZF0%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 787756dbb9500b4d-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76971e8d9448d1c2fc9010e671be5b5e
7899f8f9e6c82fc5e7cc075394956227fda2b78f
337fe74cbad1b4e18c5b3ce362938d43176b66cf33f4e9fd1e464ce76823bd72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-65658019-1&cid=257132352.1673373896&jid=137439446&gjid=1992753087&_gid=1313194209.1673373896&_u=aEBAAEAAAAAAACAAI~&z=2005539611
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-65658019-1&cid=257132352.1673373896&jid=137439446&gjid=1992753087&_gid=1313194209.1673373896&_u=aEBAAEAAAAAAACAAI~&z=2005539611
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-65658019-1&cid=257132352.1673373896&jid=137439446&gjid=1992753087&_gid=1313194209.1673373896&_u=aEBAAEAAAAAAACAAI~&z=2005539611 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.file.io
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 10 Jan 2023 18:05:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.file.io/a9a7754c-f1b5f9c5144f62adc766.js
200 OK 46 kB URL HTTP/2 www.file.io/a9a7754c-f1b5f9c5144f62adc766.js
IP
File type ASCII text, with very long lines (4190)
Hash 9c5c7c8637552168d8bfdb3e8fc9ade5
0a4c5a9233be216d0c7ca3031455341d40fbd32a
8bbfbde5ddf50f1591c3883b1c58e709c6c8c5ad0dc6749760ff26279e31c8bd
GET /a9a7754c-f1b5f9c5144f62adc766.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: Sw/hWzrQLxgk202T5AXrJ6Dg5fS/j+4S4Do2/VPuR8YHNelTVYK/NWkkoNd4SvIRGYlfbhi9Dc4=
x-amz-request-id: GE5GW14RDBSKDVEV
date: Sat, 03 Dec 2022 01:04:32 GMT
last-modified: Wed, 23 Nov 2022 15:26:37 GMT
etag: W/"4ae04cdf11989fa265bb8cc9b598298f"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e_HT438ALLRvxiZyijMzsu6JEQyxON1TVLpPXzLJA4aeNPp-D0a5mQ==
age: 3344438
X-Firefox-Spdy: h2
www.file.io/381417c15e948e10ceded78bff93c5a25db3efa3-2d94fedc279a22390bf3.js
200 OK 67 kB URL HTTP/2 www.file.io/381417c15e948e10ceded78bff93c5a25db3efa3-2d94fedc279a22390bf3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6406f5edaefb105b6615135d407e4706
6aaba597763610e21cab20609872a762e25d9204
1e787a5490454c5ee1d68eef323eaa50c636eae1ccd44799efc070b26d78f0b7
GET /381417c15e948e10ceded78bff93c5a25db3efa3-2d94fedc279a22390bf3.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: rcbapc/1Vr2ds2JA/7axMuGwyNN7uQxIhs5ZYlMsTzUL7arwegqRpOcChIDDmVIgFpGExlyFOFo4NnT1hb6Vsg==
x-amz-request-id: 4H9KR1HMDF26VTPX
date: Thu, 08 Dec 2022 00:44:56 GMT
last-modified: Wed, 23 Nov 2022 15:26:35 GMT
etag: W/"9c41c9970ebc8fe4c98c8f02b631cd07"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C5ZTbX1gOnlm4fXaKUlbsuZoiT6CBk8Nl_jQnE_O4FBjTa1399dWBQ==
age: 2913613
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash dca61fd567354d288f6f361e42c094c9
53a89682d713d95362a00bf140a8bd0ee64d71e1
fc4cdfcdc1ce0c949b2f8e7189fe02d5d44c150f76a2c10d693e8ac2ca485637
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:10 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 14 Jan 2023 14:35:14 GMT
ETag: "53a89682d713d95362a00bf140a8bd0ee64d71e1"
Last-Modified: Tue, 10 Jan 2023 14:35:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1255
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 787756dd8d49b511-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76971e8d9448d1c2fc9010e671be5b5e
7899f8f9e6c82fc5e7cc075394956227fda2b78f
337fe74cbad1b4e18c5b3ce362938d43176b66cf33f4e9fd1e464ce76823bd72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
script.4dex.io/localstore.js
200 OK 268 B URL HTTP/1.1 script.4dex.io/localstore.js
IP
File type ASCII text, with very long lines (482)
Hash 58fe1f2623397cca72ecea6ee95d76b9
ac4d33ae761cf330574597936273a9c5d82f96d0
7cb0b5944c53bbacc5983fbef96aa0c1f514ec12da81666765610eae562a9020
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Wed, 23 Nov 2022 15:43:18 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 335887
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=elXLd5uLvC51%2F4oJgnC31q29jR9GJUV16JHdpULbuk%2B7Zu%2BnmZuKIkKs8Bwul565bixonSGKXevuNKTuWwfMC1llHsKtZzSkIpc1f1pw25dgX7lbrtZzlAVdEiknWYT%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 787756dda8ec0b39-OSL
Content-Encoding: br
www.file.io/0eceb729-761e2b4090024f08e2ca.js
200 OK 2.0 kB URL HTTP/2 www.file.io/0eceb729-761e2b4090024f08e2ca.js
IP
File type ASCII text, with very long lines (11859)
Hash b8c50c8fb2373f258e946ae6687eaa7b
0ac26d055666e80e746985765f2cc26732d739e0
79c76f3b2043d967344328a93cc0a6631d93836a56710f1a148484c48ba6cfb4
GET /0eceb729-761e2b4090024f08e2ca.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: ugz4cw6nHM+Ux2xGVRcFNwECalF6LfoptXt7Jf45GFZviKWJ7aDetlOmR3PYkKUjo7uYuFVipI4=
x-amz-request-id: T1TJKG0YCHRH4JJ3
date: Tue, 10 Jan 2023 00:33:56 GMT
last-modified: Wed, 23 Nov 2022 15:26:35 GMT
etag: W/"d8fa3e295945b4065c7adabadd2be99b"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sS3dXi_NHKegwt_0wRsBie6bTg_HNpZjZ-Mc0X4IbrhVE9d_Fm6FsA==
age: 63074
X-Firefox-Spdy: h2
www.file.io/6043c7ae7d033d369a2fc1db82212855efeac9f9-0c41508d128eae5ff268.js
200 OK 7.2 kB URL HTTP/2 www.file.io/6043c7ae7d033d369a2fc1db82212855efeac9f9-0c41508d128eae5ff268.js
IP
File type Unicode text, UTF-8 text, with very long lines (24434)
Hash f05b525e5facd80e76a3410c2ac26f0d
036b2152434c348dd0af930b248dda4bc050c394
918c4e75e3d735f56f6e85c9277ec9f371a5b125234aa188110bb79ca9859d65
GET /6043c7ae7d033d369a2fc1db82212855efeac9f9-0c41508d128eae5ff268.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: x9ZwpwDDaz963I0mVJRKfAQ//03/IQgbBlguR7MKO1VUp2be+2E3iTAK5dGImXumQv8phjRcCg0=
x-amz-request-id: WANRZX0ZSQR4JQAR
date: Thu, 01 Dec 2022 01:06:03 GMT
last-modified: Wed, 23 Nov 2022 15:26:36 GMT
etag: W/"02f76c7d444e6eab701d07bea36dfd50"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q8Q80rtM1XQVN73GWx5naOm_eR-amIcPkOlVesFeRpx9L6J3EdQK3Q==
age: 3517147
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 143 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4be4efc0f444bff62aa805f816951591
76afa8e7d42b4e1b011234a7da3c8e8f5e995b26
06cd377db355de0a23859f1e96adfd83c70efe02c9ebb6f5535260b28f99c8ec
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 725
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:10 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 143
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.file.io
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: adef046e-7401-4ab6-ada6-241eb8b02985
Set-Cookie: icu=ChkInZeIARAKGAEgASgBMNbR9p0GOAFAAUgBENbR9p0GGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:10 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=2824782609478026108; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:10 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.pki.goog/s/gts1d4/oytRsHjzUrQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/oytRsHjzUrQ
IP
Hash 77476cba029fdad2ca37af07b30be2c3
d9fb9481dcd838b415cfaade585a26c163f6d3f8
e0fa6bb70483d9c3c4506fc795854ba94a879e9d33f9dfc1b86da479d4f4114d
POST /s/gts1d4/oytRsHjzUrQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ib.adnxs.com/ut/v3/prebid
200 OK 258 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d182f5cf75971ec766ca34897e6a660d
874d11492c121a6cb3ce5fb29b81a4058cb24738
f2034f66f961fa58d09d4fa4e5e73665042e459bb8f92143fcb239059d638049
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1306
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:10 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 258
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.file.io
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: abe3728a-bf0e-474a-8db4-1fddbc709df3
Set-Cookie: icu=ChkInZeIARAKGAEgASgBMNbR9p0GOAFAAUgBENbR9p0GGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:10 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=3198788467602032858; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:10 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
www.file.io/a874c63d384a247abb93b2eff37b6f661aa3cb57-5cfe5a4092f64f208325.js
200 OK 88 kB URL HTTP/2 www.file.io/a874c63d384a247abb93b2eff37b6f661aa3cb57-5cfe5a4092f64f208325.js
IP
File type ASCII text, with very long lines (21660)
Hash 3c42fd5d23c3b102bd75b5877e961f90
bd179c1632d709ecac0b4e6a3e21706babc9c09b
13ed7afb31148f9669a1a7ed0f0a180d6aa99f425e3b0c1f14b096bd5bdde45e
GET /a874c63d384a247abb93b2eff37b6f661aa3cb57-5cfe5a4092f64f208325.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: DGDvEgQ+BQqKF91GAUziEHK4Cp8RzW8UIprjo8v6c3W5oM4WiIg4CM4i9QSxjkWsiftOxgtWlvU=
x-amz-request-id: F7298EQYHMQ3KDQ5
date: Sun, 11 Dec 2022 01:06:49 GMT
last-modified: Wed, 23 Nov 2022 15:26:37 GMT
etag: W/"2b921aab089ea83ec7bb825f970e0b68"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0VPnmQvi1fRO2FGi1TlX9sMBYnS1jkNK7WKenUtDrMgyKGrnLf7zeA==
age: 2653101
X-Firefox-Spdy: h2
i.clean.gg/1a
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /1a HTTP/1.1
Host: i.clean.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 414
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key
access-control-expose-headers: Content-Length,Content-Range
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f1f049a500c23ae2405c7a6571fe08f0
2973cf8b5e5b20f4bb344e46aba55b1c48aa9994
3d837e22d65090ad79e9add08169860d8c450add9d16bef8ea616e606099cebc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1055
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Last-Modified: Tue, 10 Jan 2023 17:47:35 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f1f049a500c23ae2405c7a6571fe08f0
2973cf8b5e5b20f4bb344e46aba55b1c48aa9994
3d837e22d65090ad79e9add08169860d8c450add9d16bef8ea616e606099cebc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1055
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Last-Modified: Tue, 10 Jan 2023 17:47:35 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f1f049a500c23ae2405c7a6571fe08f0
2973cf8b5e5b20f4bb344e46aba55b1c48aa9994
3d837e22d65090ad79e9add08169860d8c450add9d16bef8ea616e606099cebc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1055
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Last-Modified: Tue, 10 Jan 2023 17:47:35 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 871
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: max-age=0, private, must-revalidate
date: Tue, 10 Jan 2023 18:05:10 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f1f049a500c23ae2405c7a6571fe08f0
2973cf8b5e5b20f4bb344e46aba55b1c48aa9994
3d837e22d65090ad79e9add08169860d8c450add9d16bef8ea616e606099cebc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1292
Cache-Control: max-age=139663
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Etag: "63bd2259-1d7"
Expires: Thu, 12 Jan 2023 08:52:53 GMT
Last-Modified: Tue, 10 Jan 2023 08:31:21 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f1f049a500c23ae2405c7a6571fe08f0
2973cf8b5e5b20f4bb344e46aba55b1c48aa9994
3d837e22d65090ad79e9add08169860d8c450add9d16bef8ea616e606099cebc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4918
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Last-Modified: Tue, 10 Jan 2023 16:43:13 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 26d72c12ac1df5459fa8ef301c8f0dd5
d659752419abf0aa600c888358fcf57a0b18159c
c6f4ed185458d1255e74b66ba140eb05addd1e277e2832ec0c1a56567858f6da
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e9ca77bc46119940d7891497ddec4d0
0d521fc0bae3cef6dac5b5529e62fa7fdb1d8aba
c079f3326abc9a4863c84c1c90593133109f4f86ac76b2c5ee2a6896a55a4f5f
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e0fcd8e4b696b745f0094d56ddec50b2
218d3e8d83419d685f3d02cb12b96fe97e518c82
5efac0e92c8e968640066131ce47608cd84a04948ffc56dc9c2d999998d07461
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96907201777748ca014e267bcc02a0&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a0707bd0af91344c29cc0149bba7487b
35a4f1ffe50c8fc0adb155efb5dcf155dad14977
e5f6edb41f84478299686ef3ce221d9a92fde447005cd1100659142d8d2741b0
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
tg1.aniview.com/api/adserver/spt?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5
200 OK 6.1 kB URL HTTP/1.1 tg1.aniview.com/api/adserver/spt?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5
IP
File type ASCII text, with very long lines (2004)
Hash 4f3ddafe4bc2807f4f86e2b09903bb72
f80ba4d9596de0f6345a6b5a84c178dd5fa955cb
b641ad7a69a8647b68ee6ff4c28cde4d425b50bc7aa597099471bfdd3fcf6d4f
GET /api/adserver/spt?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5 HTTP/1.1
Host: tg1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Access-Control-Allow-Methods: GET, POST, DELETE, PUT, OPTIONS, INDEX
Access-Control-Allow-Headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With,avsptstaging
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 6123
Cache-Control: max-age=300
Expires: Tue, 10 Jan 2023 18:10:10 GMT
Date: Tue, 10 Jan 2023 18:05:10 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.digicert.com/
200 OK 471 B IP
Hash b8ec4b2197e42ef25210c6546ed03c3d
a794e8c1e2c015a37ade94a05d863b6b277cc1c7
89535af6a6bf0b7c27537bfa934c5ed37229e604e97f76a3d5f1329336f48cb7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5664
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:10 GMT
Last-Modified: Tue, 10 Jan 2023 16:30:46 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=%208a96956701777748ce2a4e25945002e3&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=%208a96956701777748ce2a4e25945002e3&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 649d21e37a40ef403ee88caf855145a4
c46623ce641e2d848cb631f99ce26451b5a8305b
feb99c3ec1714bed032fcb5d7848dbfb05775307a85e3ded7265e9443108687c
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=%208a96956701777748ce2a4e25945002e3&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a5f663abca6b7b8fbeed03580c1205c3
6bbcb39a3af581d3d095f531950e4e07a65d5a46
4cc2681b533e096c10a26f97e9affa50db003cede90555fd0c8e318cce6419e4
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 105b8ef7eea6062385ed300f20bfd232
b31ebd671a2a7e2f0220552d5d0be7d2644e1c16
04eb2f0cfb7c5321ec8e3149fa7773afcdaab4057f296ccc3409849f1088a11f
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e260fc202e4&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9543ef8f82ae0a4af198e6d2774c5bf8
15e2404c45f355fe2d94c6eb4bc93f4e4283b5a3
1c049eeddffb70bbb0f1ea1c41f2a13ab254ea33467a48a7044279203f62b4e7
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:10 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2d3e03b4e10e35fa192c7ed7458b958e
556f40fdbe8cc72155600a726d45a9799cb43d52
9e4790f2fc2139aabcc56217322c49c8ea7567241efadaf5037e4a58a50ac32f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155629
Date: Tue, 10 Jan 2023 18:05:10 GMT
Etag: "63bd61a1-1d7"
Expires: Thu, 12 Jan 2023 13:18:59 GMT
Last-Modified: Tue, 10 Jan 2023 13:01:21 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AujSYUXXqJspxINwVrw0Ozll9FCQEb4cYRJAuLLRtJ2rqYIBhrlGsA==
Age: 1058
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2459
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache, no-store, must-revalidate
date: Tue, 10 Jan 2023 18:05:10 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 89f1e7520335b125f1d3d0c33f91a8e4
37951598d7d0342271e557d52a1130dc5e33d71d
e56c04cb1a5448d6714c84626f2543c6c4469d28ccc9e6723c598cff63ac3b27
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114824
Date: Tue, 10 Jan 2023 18:05:10 GMT
Etag: "63bcb340-1d7"
Expires: Thu, 12 Jan 2023 01:58:54 GMT
Last-Modified: Tue, 10 Jan 2023 00:37:20 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9ez2pnZN28qchqOpEhDo5ggRQZpFNGw8f0S1kVnL1QBTmYATK0l0HQ==
Age: 4894
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 694
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:11 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90916604/1?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/90916604/1?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 71f585a4691151fa68dc6d1d4c837879
85579c1794bb45fc94660a6bc597209d25f81a90
b69ba8062ccca4c560b5a4b8c1bd25c3a9b45561c94cddc963c230874830ea83
GET /watch/90916604/1?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.file.io
Referer: https://www.file.io/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 10 Jan 2023 18:05:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 10-Jan-2023 18:05:11 GMT
last-modified: Tue, 10-Jan-2023 18:05:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
player.avplayer.com/script/2/v/avcplayer.js
200 OK 61 kB URL HTTP/2 player.avplayer.com/script/2/v/avcplayer.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9dff0335699f04080269947f40c366ae
8447df4f8b168d9c506630f96ef95002c2c6eb28
157b5912ad26a879f38d0dafb1fce2def6df3168a08f991d6203463375fa32fc
GET /script/2/v/avcplayer.js HTTP/1.1
Host: player.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Mar 2022 17:18:44 GMT
etag: "9dff0335699f04080269947f40c366ae"
x-guploader-uploadid: ADPycdtu-4lkKnewYrLZAQ6C3FYocqKyAEpTHAcTl1fhfCPCh7vxR-IJqbD_5jBst3P2Kl4LF2YOsUpbgaREFcUSdQ
server: UploadServer
x-goog-generation: 1646327924579580
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 61326
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=DITkQg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 61326
cache-control: public, max-age=300
expires: Tue, 10 Jan 2023 18:10:11 GMT
date: Tue, 10 Jan 2023 18:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
feed.avplayer.com/backend/get?cmsType=playlist&id=636a37af05e5617b262a5a52&AV_TAGID=6374f8665f2f007d23421195&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&AV_TEMPID=62f50abe103ae32adf5785c8&AV_PUBLISHERID=5f2063121d82c82557194737
200 OK 750 B URL HTTP/2 feed.avplayer.com/backend/get?cmsType=playlist&id=636a37af05e5617b262a5a52&AV_TAGID=6374f8665f2f007d23421195&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&AV_TEMPID=62f50abe103ae32adf5785c8&AV_PUBLISHERID=5f2063121d82c82557194737
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with very long lines (4508), with no line terminators
Hash 58d08a8aab88b39d20f04cba501d3977
fdc7d83ab37918918db5c196f6616e402968139a
c617f05d15939a06ddd9d906aba8ca078c1a02a2f438c406876021839f34606d
GET /backend/get?cmsType=playlist&id=636a37af05e5617b262a5a52&AV_TAGID=6374f8665f2f007d23421195&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&AV_TEMPID=62f50abe103ae32adf5785c8&AV_PUBLISHERID=5f2063121d82c82557194737 HTTP/1.1
Host: feed.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
content-type: application/json; charset=utf-8
x-powered-by: PHP/8.1.12
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-envoy-upstream-service-time: 19
vary: Accept-Encoding
content-encoding: gzip
cache-control: private, max-age=3600
expires: Tue, 10 Jan 2023 19:05:11 GMT
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 750
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1458
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
File type ASCII text, with very long lines (65354)
Hash 532a99fc0eb7b2c50a6bb0e5238b8dbb
d84157eb7e55c39d52ba5dde6e5bd4666f596e71
e6fa5d38f82f6bebf5dba12f2e84db1383827936fe077374593c6285f94e784c
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: lvsMv7XXlBvggYpqFSqyfX3dqesjNEjCN8PDvS3yPp3bqSuESlIc4Qkznb8zWJ1oF52p2bLTh2Q=
x-amz-request-id: 56CAFVZ52PF5XM00
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Last-Modified: Tue, 22 Nov 2022 09:44:15 GMT
ETag: W/"c56b6332dacf72f135afcd153ae22448"
Cache-Control: public, max-age=1800
CF-Cache-Status: HIT
Age: 1574725
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y3ESbfNKuINKn4mzscmaXnthLae5n7AcFdz8YcHlEvvdGpJpEsOLThyWX2Xg0MxCVE2v9ext7h%2FouYp2PHz0LOoH0h5XZKjADPIHtEYpVYhkhWAVk%2BRJ%2Fh4eI0csQG1k"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 787756e1e955b512-OSL
Content-Encoding: br
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39364)
Hash 2b3946e00c0a4569f5ce3030c5feb653
8f2c4b75baa3fa2290e7f84701d2989069125731
fd3f560b787929ac3cd814e46860f645dd4455dd87dc82a0ce34975194f1f01b
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27709
date: Tue, 10 Jan 2023 18:05:11 GMT
expires: Tue, 10 Jan 2023 18:05:11 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1447 / 264 of 1000 / last-modified: 1673352801"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 10 Jan 2023 18:05:11 GMT
access-control-allow-origin: *
etag: "63ae6ee1-2b"
expires: Tue, 10 Jan 2023 19:05:11 GMT
accept-ranges: bytes
last-modified: Fri, 30 Dec 2022 07:53:53 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4dd9905fc538b36a18749f4d75638b71
aee7bd0bd2b1a45ec68578fa51181f9629c6e5a3
f8345feec2406abf0402ba199d96426a36309e6710ff6a825c556dd5ce1355eb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 10 Jan 2023 18:05:11 GMT
Last-Modified: Tue, 10 Jan 2023 16:50:52 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yN1P1VcQowNeC6NxLqw3i8EE2WLY7yIIBuPporEZYc9qeGYg8Uy64g==
Age: 4459
track1.aniview.com/track?pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&cb=1673373897225&r=www.file.io&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d65=IntentIQ&d66=7&e=playerLoaded&cpid=636a37af05e5617b262a5a52&str=viewable
200 OK 0 B URL HTTP/2 track1.aniview.com/track?pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&cb=1673373897225&r=www.file.io&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d65=IntentIQ&d66=7&e=playerLoaded&cpid=636a37af05e5617b262a5a52&str=viewable
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&cb=1673373897225&r=www.file.io&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d65=IntentIQ&d66=7&e=playerLoaded&cpid=636a37af05e5617b262a5a52&str=viewable HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=5f2063121d82c82557194737
200 OK 118 kB URL HTTP/2 player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=5f2063121d82c82557194737
IP
File type Unicode text, UTF-8 text, with very long lines (44568), with LF, NEL line terminators
Size 118 kB (118439 bytes)
Hash 2e7713ef8ceb2519e96434505ca796dd
8bf18962041fa14b78d2c24370dad531a50ca767
90653680cc2fb826c7843e5c56ac886d8498a2efd04b4a34448aad1f41391c3d
GET /script/6.1/AVmanager.js?v=1.0&type=s&pid=5f2063121d82c82557194737 HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvEj38y9cWa6kPph96ytsgNLoX_eyA8xXRzXs6JztVd8bXw0L5vJCWc9nABq_gvVTCP5Zg8qzZ-R1qgxSt1klf0p7ZTts67
x-goog-generation: 1672737045117191
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 118439
content-encoding: gzip
x-goog-hash: crc32c=lxrlyQ==, md5=LncT74zrJRnpZDRQXKeW3Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 118439
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "2e7713ef8ceb2519e96434505ca796dd"
content-type: application/javascript
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:11 GMT
date: Tue, 10 Jan 2023 18:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
track1.aniview.com/track?r=www.file.io&sn=&ic=0&tgt=0&app=&wi=440&he=247&test=&d36=6.2.71&apppkg=&fv=1&proto=https&d65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&e=inventory&vi=77&cb=1673373897830
200 OK 0 B URL HTTP/2 track1.aniview.com/track?r=www.file.io&sn=&ic=0&tgt=0&app=&wi=440&he=247&test=&d36=6.2.71&apppkg=&fv=1&proto=https&d65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&e=inventory&vi=77&cb=1673373897830
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?r=www.file.io&sn=&ic=0&tgt=0&app=&wi=440&he=247&test=&d36=6.2.71&apppkg=&fv=1&proto=https&d65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&pid=5f2063121d82c82557194737&cid=6374ee512c8ca8606841c0a8&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&e=inventory&vi=77&cb=1673373897830 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
206 Partial Content 1.5 MB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 1.5 MB (1540096 bytes)
Hash ebaf83cc6e0ea8af492c7151de6b8356
df57997b5b905cf4f7ca224e9a694e23592eb08c
f91164fd1de18ce7424cafbf2b95c39153ccf5d70ff5e165741dc0b966ab90f2
GET /6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 13496024
Content-Range: bytes 0-13496023/13496024
Content-Type: video/mp4
Last-Modified: Tue, 19 Apr 2022 15:55:06 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdunN_g8mCuye3-3969bBKHnud33BdxhPS6QnuGMSi8t9Omr98VdDpO2yLpYoQkzm9I_8q5XRqya245-1upcLjgXdGk1yHjt
ETag: "5988954ac663c7a7640a82f507517315"
x-goog-generation: 1650383706252946
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13496024
x-goog-hash: crc32c=JIY8pw==, md5=WYiVSsZjx6dkCoL1B1FzFQ==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop232.sk1.shc,1673373911.dop232.sk1.t,1673373911.cds262.sk1.c
Cache-Control: public, max-age=2592000
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cpll&cb=1673373897534
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cpll&cb=1673373897534
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cpll&cb=1673373897534 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
206 Partial Content 16 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 503f530413b5fa11762956951755114c
d69bbc7cb0b63f9611b9e59348d34699ad91b2e9
e0974bdf37d37e83ed013a1137a317a9f52dc38011949c4b83c349232891589c
GET /6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 3461456
Content-Range: bytes 0-3461455/3461456
Content-Type: video/mp4
Last-Modified: Fri, 17 Sep 2021 03:31:02 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdv4nlThQCwXXkjanig6bR-tW-grUuU7nT_eGe_KYYnlH7RlowXuCXvQIbpTIDS1pre0fty3jENsVgVYqtjasbZDtg
ETag: "1a477af42aad03e5a09ca1d553953c94"
x-goog-generation: 1631849462506067
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3461456
x-goog-hash: crc32c=XT+HgA==, md5=Gkd69CqtA+WgnKHVU5U8lA==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop211.sk1.shc,1673373911.dop211.sk1.t,1673373911.cds260.sk1.c
Cache-Control: public, max-age=2592000
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897920
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897920
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897920 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897962
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897962
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373897962 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898033
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898033
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=625edad12c2bbd0fa201f6f6&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898033 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
206 Partial Content 16 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 2ec54edd2f39f902ee86ff037465e218
1c3a4e736e814815f156a576e7d592f75f3f49eb
6dafa265b0347272a26ad6d0b0222c690516ee056e5d7664d896999f0bb708f7
GET /6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 13496024
Content-Range: bytes 0-13496023/13496024
Content-Type: video/mp4
Last-Modified: Tue, 19 Apr 2022 15:55:06 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdunN_g8mCuye3-3969bBKHnud33BdxhPS6QnuGMSi8t9Omr98VdDpO2yLpYoQkzm9I_8q5XRqya245-1upcLjgXdGk1yHjt
ETag: "5988954ac663c7a7640a82f507517315"
x-goog-generation: 1650383706252946
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13496024
x-goog-hash: crc32c=JIY8pw==, md5=WYiVSsZjx6dkCoL1B1FzFQ==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop219.sk1.t,1673373911.cds206.sk1.shn,1673373911.dop219.sk1.t,1673373911.cds262.sk1.c
Cache-Control: public, max-age=2592000
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
206 Partial Content 16 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 503f530413b5fa11762956951755114c
d69bbc7cb0b63f9611b9e59348d34699ad91b2e9
e0974bdf37d37e83ed013a1137a317a9f52dc38011949c4b83c349232891589c
GET /6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 3461456
Content-Range: bytes 0-3461455/3461456
Content-Type: video/mp4
Last-Modified: Fri, 17 Sep 2021 03:31:02 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdv4nlThQCwXXkjanig6bR-tW-grUuU7nT_eGe_KYYnlH7RlowXuCXvQIbpTIDS1pre0fty3jENsVgVYqtjasbZDtg
ETag: "1a477af42aad03e5a09ca1d553953c94"
x-goog-generation: 1631849462506067
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3461456
x-goog-hash: crc32c=XT+HgA==, md5=Gkd69CqtA+WgnKHVU5U8lA==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop022.sk1.shc,1673373911.dop022.sk1.t,1673373911.cds260.sk1.c
Cache-Control: public, max-age=2592000
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898115
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898115
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&pid=5f2063121d82c82557194737&r=www.file.io&sn=&cd1=&cd2=&cd3=&app=&wi=440&he=248&test=&vi=77&e=cerr&cb=1673373898115 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:11 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 445fa7d43051008e7c15b091b06c6a2e
d8718a8652b60cb440eba43679e156d9adb0b172
8eb807ca7befd8418c90ed751edad489785cbf2f876795be5a70cff7db94872d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a38c30af1c779bc9d80a205088798888
d989febed94cdd6d2587c2a24d249a44b828447f
12c18aa336978273d79efa14451256b40bb95aaedd434b03db4b5912b521c35d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=www.file.io
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.file.io
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.file.io HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 10 Jan 2023 18:05:12 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.file.io
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.file.io
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.file.io HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 10 Jan 2023 18:05:12 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 445fa7d43051008e7c15b091b06c6a2e
d8718a8652b60cb440eba43679e156d9adb0b172
8eb807ca7befd8418c90ed751edad489785cbf2f876795be5a70cff7db94872d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a38c30af1c779bc9d80a205088798888
d989febed94cdd6d2587c2a24d249a44b828447f
12c18aa336978273d79efa14451256b40bb95aaedd434b03db4b5912b521c35d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
206 Partial Content 28 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 0a0f235c568bd18d2bc1bc8632d9b9a5
bcc97acdceebbf07f8e16dd280f516ec6a796f90
a460f59b2d5b4645861d8a7ddfb7856bdb37fec1081b475001c2535879f07a87
GET /6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 13496024
Content-Range: bytes 0-13496023/13496024
Content-Type: video/mp4
Last-Modified: Tue, 19 Apr 2022 15:55:06 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdunN_g8mCuye3-3969bBKHnud33BdxhPS6QnuGMSi8t9Omr98VdDpO2yLpYoQkzm9I_8q5XRqya245-1upcLjgXdGk1yHjt
ETag: "5988954ac663c7a7640a82f507517315"
x-goog-generation: 1650383706252946
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13496024
x-goog-hash: crc32c=JIY8pw==, md5=WYiVSsZjx6dkCoL1B1FzFQ==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop016.sk1.shc,1673373911.dop016.sk1.t,1673373911.cds262.sk1.c
Cache-Control: public, max-age=2592000
7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: 7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Tue, 10 Jan 2023 18:05:12 GMT
expires: Wed, 10 Jan 2024 18:05:12 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0.js
200 OK 56 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 547e678c14c4d2f8f6c1d44afde836d1
8317aed2a6946c87ef485263acd8a787139bbc1c
eaaf8b5fda3e86ed0b6670112d84b424af49d274c7b8eb7e2c2e594513b0ee2b
GET /script/6.1/libs/prebid/avpb7.12.0.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsy2wexS-0Ow1PVp3TeWpLq22x-43Ipnwd0oUr_Q_C5c7XU8FILLjkKztSJeFzbDqGbabPYsz_8JKVXNTnXQ6PlPwCLyDzl
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "547e678c14c4d2f8f6c1d44afde836d1"
x-goog-generation: 1672737045628929
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 55924
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=JLi8tg==, md5=VH5njBTE0vj2wdRK/eg20Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 55924
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:12 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a0.js
200 OK 24 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3b39515b721da0b140fe812efcc81428
98521226490a470b079653008a3e7360bfa919b9
e92693e5666dbbd545cb25cb0e2b84bbd420013e56702ad28825184ccdaba57c
GET /script/6.1/libs/prebid/avpb7.12.0a0.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv9S2tMlDKoBTSQNiePXlPTvsFFIdPopu60XarBuNJYxf9Hyd_aRh-AQQd_3SrPhhR7FdSazt9xFScjnNIWCL77yA
x-goog-generation: 1672737045746365
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23859
content-encoding: gzip
x-goog-hash: crc32c=8r3ZYw==, md5=OzlRW3IdoLFA/oEu/MgUKA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23859
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "3b39515b721da0b140fe812efcc81428"
content-type: application/javascript
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:12 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a1.js
200 OK 20 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a1.js
IP
File type ASCII text, with very long lines (63517), with no line terminators
Hash b4f42f27a6f81e04957cd35d1215fdfe
00a9b595920f8b4e34f348b9ec94409897fd1fb8
a4f5b01df3c059c98b3d0b24a2266be95f75d312eaf99a90c64315f792f203a9
GET /script/6.1/libs/prebid/avpb7.12.0a1.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt3EOkN2iVU8rU3kiYX5fExFST_C90jLi9y0og2z8e3MuZs8a0aLywYYyp-PAb8taJs9ZNx1FR9ZbR8oJoxadmBjQ
x-goog-generation: 1672737045786291
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20495
content-encoding: gzip
x-goog-hash: crc32c=3vU0GQ==, md5=tPQvJ6b4HgSVfNNdEhX9/g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 20495
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "b4f42f27a6f81e04957cd35d1215fdfe"
content-type: application/javascript
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:12 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a2.js
200 OK 20 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a2.js
IP
File type ASCII text, with very long lines (65275), with no line terminators
Hash a61893a4b670f058903537fb500846fe
fb5a2c3aba6755c0b18ed8aa531e36f1060fdcf7
158d99fad188e6802d348d48ab222226cd24240dd3ff65ebb49cc1edb12889b3
GET /script/6.1/libs/prebid/avpb7.12.0a2.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdukjOciQaEstKxO2szydOjBiY5HMiP9cq_rrMXtAsruiaZMPSwvJ-0LIbS04R5FhHUPMnPX6cFbjcPeS_mUGQjJrWBQGMhM
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "a61893a4b670f058903537fb500846fe"
x-goog-generation: 1672737045793611
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20344
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=Xi64Lw==, md5=phiTpLZw8FiQNTf7UAhG/g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 20344
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:12 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a4.js
200 OK 21 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a4.js
IP
File type ASCII text, with very long lines (65297), with no line terminators
Hash 002dbb6f7aed1048cc491707ac3a6511
d1c2f1fb02e14b9906c78b1456ed927c3c4e3b45
8baa37a20209d3fc724a258ed9e33d9e9de81ea2c27ceaa5379a0fa5a3501e12
GET /script/6.1/libs/prebid/avpb7.12.0a4.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduUmqjNrU9n9_1io1UwhtcUN3RMBEGrZ_wO1FyyclsgVcblKFb2iMbLmkR8i7oorUnCRR2-Pq-XHxO5_Y7ElVN4pfrIJTBQ
x-goog-generation: 1672737045823096
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21089
content-encoding: gzip
x-goog-hash: crc32c=KgNuBw==, md5=AC27b3rtEEjMSRcHrDplEQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 21089
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
last-modified: Tue, 03 Jan 2023 09:10:45 GMT
etag: "002dbb6f7aed1048cc491707ac3a6511"
content-type: application/javascript
cache-control: public, max-age=600
expires: Tue, 10 Jan 2023 18:15:12 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a88bf3f7174689c031e48af494a0c019
7b9144b355b784106437b3a653dd58522c9959fd
1d9283bfcd6b1c39a4df780f081e7e0f3c97a8feb524679de76f29ac701ac61c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D9283BFCD6B1C39A4DF780F081E7E0F3C97A8FEB524679DE76F29AC701AC61C"
Last-Modified: Mon, 09 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11364
Expires: Tue, 10 Jan 2023 21:14:36 GMT
Date: Tue, 10 Jan 2023 18:05:12 GMT
Connection: keep-alive
status.geotrust.com/
200 OK 471 B IP
Hash 47bccedefd91efc278356c05cdfe0c0b
1fb2bc9e3cab966f87f13a96236840d97e6d8007
8f7d5b5f4d23f1ae20bb4abf043c722016d80a249b89d859774c249649d390bf
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1221
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Last-Modified: Tue, 10 Jan 2023 17:44:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ads.pubmatic.com/AdServer/js/user_sync.html?p=160993&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D1%26key%3D
200 OK 5.6 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=160993&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D1%26key%3D
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15889), with no line terminators
Hash 18a6bc0e051c0767f814f63ff07e65f9
8fbe4eb399d8501b90276723d38c9ffb4ab483fa
26341482a8d6c8384b2cb91aba95833ac2002bd284ff690adbd2009bf76cb95b
GET /AdServer/js/user_sync.html?p=160993&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D1%26key%3D HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 16 Dec 2022 06:36:49 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5554
content-type: text/html
cache-control: max-age=149110
expires: Thu, 12 Jan 2023 11:30:22 GMT
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 6d1a04cbe21dcf5497093506edda0b47
19b4b70b5b883346be5c46a6665760e09ad69af2
1dc7ec5412097ffd211364e60e62c364ccc60d29e5ef8bc540d6faa4ac4fb117
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 07 Jan 2023 13:55:56 GMT
Expires: Sat, 14 Jan 2023 13:55:55 GMT
Etag: "19b4b70b5b883346be5c46a6665760e09ad69af2"
Cache-Control: max-age=330042,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756eadcd3b4f3-OSL
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?p=aniview&endpoint=us-east HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east
date: Tue, 10 Jan 2023 18:05:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373898867&asid=637b7eaa93283f4fba7e40c8%2C5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff5868b4c1613054b3b5ee4%2C60215b2a3cfdb257402901c4%2C5ffffc9e712b1564036ba7e2%2C619f58d1f078ac47ae2508f5%2C60215ad06fe78c75dd21c834%2C5ff6ed8d06e9773265718a49%2C633ae81e14ba3a033d3a0fd6&ofpr=%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373898867&asid=637b7eaa93283f4fba7e40c8%2C5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff5868b4c1613054b3b5ee4%2C60215b2a3cfdb257402901c4%2C5ffffc9e712b1564036ba7e2%2C619f58d1f078ac47ae2508f5%2C60215ad06fe78c75dd21c834%2C5ff6ed8d06e9773265718a49%2C633ae81e14ba3a033d3a0fd6&ofpr=%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373898867&asid=637b7eaa93283f4fba7e40c8%2C5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff5868b4c1613054b3b5ee4%2C60215b2a3cfdb257402901c4%2C5ffffc9e712b1564036ba7e2%2C619f58d1f078ac47ae2508f5%2C60215ad06fe78c75dd21c834%2C5ff6ed8d06e9773265718a49%2C633ae81e14ba3a033d3a0fd6&ofpr=%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:12 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 2e438f10551fe855eaab0021d54b2752
75ef435eba4cf11fff34d43b7722fb168b1fcb21
e6c1a5c087845989fea5a270714c0f9eb2ca3cecfd77e7b626992f98e2865e97
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4246
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Last-Modified: Tue, 10 Jan 2023 16:54:26 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 314
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373898867&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri=1
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373898867&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373898867&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri=1 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:12 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
csync.loopme.me/?pubid=&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D56%26pid%3D5f2063121d82c82557194737%26key%3D%7Bdevice_id%7D
307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?pubid=&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D56%26pid%3D5f2063121d82c82557194737%26key%3D%7Bdevice_id%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pubid=&gdpr=1&gdpr_consent=&redirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D56%26pid%3D5f2063121d82c82557194737%26key%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=84a1030c-f62e-4cde-9f58-f7fc5b1a9f40; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Mon, 10-Apr-2023 18:05:12 GMT; SameSite=None
location: https://sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=56&pid=5f2063121d82c82557194737&key=84a1030c-f62e-4cde-9f58-f7fc5b1a9f40&gdpr_consent=null&gdpr=1
content-length: 0
date: Tue, 10 Jan 2023 18:05:12 GMT
server: _
X-Firefox-Spdy: h2
onetag-sys.com/usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1---
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=57e618150c70d90&gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 903d95e1a0ee1f6a7645c377c125ccb4
fe2ef405488dc7e7ee823777e3f484d3336bf453
8982792b6b5594b6a6a95380b740bfd53fceda19c118c70584ee1892561c0f13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3463
Cache-Control: max-age=165897
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Etag: "63bd805a-1d7"
Expires: Thu, 12 Jan 2023 16:10:09 GMT
Last-Modified: Tue, 10 Jan 2023 15:12:26 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6b0c791541b73984100978c2d9efb6b
15ca4bb1a0ce8b91da58f88362974445a5d936ec
f5cf7f17bd879b71a5aa58837e8d09e90ff8c44ebfa98ac505c5ec555654a6d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.geotrust.com/
200 OK 471 B IP
Hash 47bccedefd91efc278356c05cdfe0c0b
1fb2bc9e3cab966f87f13a96236840d97e6d8007
8f7d5b5f4d23f1ae20bb4abf043c722016d80a249b89d859774c249649d390bf
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1259
Cache-Control: max-age=162636
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Etag: "63bd7c39-1d7"
Expires: Thu, 12 Jan 2023 15:15:48 GMT
Last-Modified: Tue, 10 Jan 2023 14:54:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=aniview&endpoint=us-east HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Tue, 10 Jan 2023 18:05:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
ups.analytics.yahoo.com/ups/58543/occ?gdpr=1&gdpr_consent=
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58543/occ?gdpr=1&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58543/occ?gdpr=1&gdpr_consent= HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:12 GMT
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
age: 0
server: ATS/9.1.10.25
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3654a7cae50658671fd45d176069a8f6
8f8fd232223bbf34b4f02e5079def8af7a63f479
f9ad82d6bb34d40992b0cf897fa3846ce63253a7665df8ce7248cc3e71ce09f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6021
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Last-Modified: Tue, 10 Jan 2023 16:24:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 10 Jan 2023 18:05:12 GMT
expires: Tue, 10 Jan 2023 18:05:12 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash f8680aaf03aee23dac2972b51c8be616
f6ec7604366192259b3ca4ceb6c23f388f7cb187
f86c27845e3244eb0abe6307f73c3ea25440b30212b3fd782478f2e027eb6424
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Last-Modified: Tue, 10 Jan 2023 16:43:02 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 313
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8bd889ec-302d-44e9-a290-89266ee38381.jpeg
200 OK 0 B URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8bd889ec-302d-44e9-a290-89266ee38381.jpeg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8bd889ec-302d-44e9-a290-89266ee38381.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7981
x-amzn-requestid: aef01bcd-4752-4435-a6a8-a33c78cb7d42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZ1FIFQVIAMFTmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba3553-2d2e650374cb35a322f96153;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 03:15:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7mLg6jPKWUrMy3N0c4eddMN0_WBzh4fDyWRL9hk5BUFoRhPSQ3dBog==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 03:25:45 GMT
age: 52764
etag: "ac50f2b47dd387175f838d4606e33fb91fec37b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 812fb046cc34f425984f740d4f97349a
01cfcb58d4140b6aa8cc97d299178931f658e6c3
779464111ae3cb1c731472664b3e625c248041acd1f803a849c35d06f7a2921d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3709
Cache-Control: max-age=169411
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:12 GMT
Etag: "63bd8d1e-1d7"
Expires: Thu, 12 Jan 2023 17:08:43 GMT
Last-Modified: Tue, 10 Jan 2023 16:06:54 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ce91031e9479803b496e70316ead049
ab758adcce749717313504c0fcb933478943c621
d7d7e5d9eac04d212d37b70a652682550a32ff55c866a735e2ad4cc110af9a26
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 10 Jan 2023 13:56:49 GMT
Expires: Tue, 17 Jan 2023 13:56:48 GMT
Etag: "ab758adcce749717313504c0fcb933478943c621"
Cache-Control: max-age=589295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756ebfa2fb4f9-OSL
ssbsync.smartadserver.com/api/sync?callerId=54&gdpr=1&gdpr_consent=&rdir=
200 OK 0 B URL HTTP/2 ssbsync.smartadserver.com/api/sync?callerId=54&gdpr=1&gdpr_consent=&rdir=
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync?callerId=54&gdpr=1&gdpr_consent=&rdir= HTTP/1.1
Host: ssbsync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Tue, 10 Jan 2023 18:05:12 GMT
X-Firefox-Spdy: h2
sync.technoratimedia.com/services?srv=cs&pid=70&uid=1673373912406-931371827337-006399-011-001390&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D3%26key%3D%5BUSER_ID%5D
204 No Content 0 B URL HTTP/2 sync.technoratimedia.com/services?srv=cs&pid=70&uid=1673373912406-931371827337-006399-011-001390&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D3%26key%3D%5BUSER_ID%5D
IP
ASN #31898 ORACLE-BMC-31898
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /services?srv=cs&pid=70&uid=1673373912406-931371827337-006399-011-001390&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D3%26key%3D%5BUSER_ID%5D HTTP/1.1
Host: sync.technoratimedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 10 Jan 2023 18:05:12 GMT
set-cookie: tads_uid=GDPR; Max-Age=157680000; Expires=Sun, 09 Jan 2028 18:05:12 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None
access-control-allow-origin: https://www.file.io/
access-control-allow-credentials: true
access-control-allow-methods: POST,GET,HEAD,OPTIONS
x-varnish: 876223149
age: 0
via: 1.1 varnish
X-Firefox-Spdy: h2
x.bidswitch.net/sync?ssp=&user_id=1673373912406-931371827337-006399-011-001390&gdpr=1&gdpr_consent=&us_privacy=1---
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?ssp=&user_id=1673373912406-931371827337-006399-011-001390&gdpr=1&gdpr_consent=&us_privacy=1---
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?ssp=&user_id=1673373912406-931371827337-006399-011-001390&gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1447
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1685
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache, no-store, must-revalidate
date: Tue, 10 Jan 2023 18:05:11 GMT
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1449
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash aadc477d7842b8eceb8fe1f1009002fb
783c7c2d945b735de154c692e29f8f653e1ca4fd
c6699c0c1cf7fba54a2af488444ba7810e3f2e81e652fe23c249355fb54898e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6037
Cache-Control: max-age=117741
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Etag: "63bcba31-1d7"
Expires: Thu, 12 Jan 2023 02:47:34 GMT
Last-Modified: Tue, 10 Jan 2023 01:06:57 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e06041fffd1631ce1b63dbad57ffd663
eb5d6e4bd219550e6479ec50387c521d44137d7e
652460c549474ea053102600506c98e82ab5f72a478082f248d3ab37518ce612
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=1&_fw_gdpr_consent=
200 OK 43 B URL HTTP/1.1 ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=1&_fw_gdpr_consent=
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /auto-user-sync?px=1953&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/gif
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1673373913080026-363
Expires: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: UID=0e6d13abc35bff489713b82d35a7ba1; Domain=ads.stickyadstv.com; Expires=Thu, 09-Feb-2023 18:05:13 GMT; Path=/
pxId=1953; Domain=ads.stickyadstv.com; Path=/
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
206 Partial Content 16 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 2ec54edd2f39f902ee86ff037465e218
1c3a4e736e814815f156a576e7d592f75f3f49eb
6dafa265b0347272a26ad6d0b0222c690516ee056e5d7664d896999f0bb708f7
GET /6006a32f94a1ea4fe84a39a6/videos/625edad12c2bbd0fa201f6f6/625edb3e2d0dea26100d8f63/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 13496024
Content-Range: bytes 0-13496023/13496024
Content-Type: video/mp4
Last-Modified: Tue, 19 Apr 2022 15:55:06 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdunN_g8mCuye3-3969bBKHnud33BdxhPS6QnuGMSi8t9Omr98VdDpO2yLpYoQkzm9I_8q5XRqya245-1upcLjgXdGk1yHjt
ETag: "5988954ac663c7a7640a82f507517315"
x-goog-generation: 1650383706252946
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13496024
x-goog-hash: crc32c=JIY8pw==, md5=WYiVSsZjx6dkCoL1B1FzFQ==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop017.sk1.shc,1673373911.dop017.sk1.t,1673373911.cds262.sk1.c
Cache-Control: public, max-age=2592000
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ce91031e9479803b496e70316ead049
ab758adcce749717313504c0fcb933478943c621
d7d7e5d9eac04d212d37b70a652682550a32ff55c866a735e2ad4cc110af9a26
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 10 Jan 2023 13:56:49 GMT
Expires: Tue, 17 Jan 2023 13:56:48 GMT
Etag: "ab758adcce749717313504c0fcb933478943c621"
Cache-Control: max-age=589294,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756ebee6ab4f3-OSL
www.google.com/recaptcha/api2/aframe
200 OK 511 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 0d8e5ffeffad30a8d442d2412795025d
63dfd87f78cc1b2d06b25e9e85061256a897619b
1f811d418d055071ec830700e2c2ed18280ae40160da7a64088c348a9d5762dd
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 10 Jan 2023 18:05:13 GMT
date: Tue, 10 Jan 2023 18:05:13 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-cfl0fpU-KK_bUle94SjlDA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 511
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899186&pKey=1686560009&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899186&pKey=1686560009&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
IP
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899186&pKey=1686560009&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247 HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Credentials: true
x-sticky-vk: 1673373913078033-403
Expires: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=0e6d13abc35bff489713b82d35a7ba1; Domain=ads.stickyadstv.com; Expires=Thu, 09-Feb-2023 18:05:13 GMT; Path=/
ocsp.digicert.com/
200 OK 313 B IP
Hash 9777719aa307ceda907e790c3291b98b
f0f32ae4f6449849fe1f4e57326166b34b2fa322
bd91e99c9b82fc65c48a42df19f7846c4285edd61e0370234967bff64dc18fc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 406
Cache-Control: max-age=151003
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Etag: "63bd521e-139"
Expires: Thu, 12 Jan 2023 12:01:56 GMT
Last-Modified: Tue, 10 Jan 2023 11:55:10 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 313
x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1---
200 OK 43 B URL HTTP/2 x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1---
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /check_uuid/https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D24%26pid%3D59c9148628a0612da3689288%26key%3D%24%7BBSW_UUID%7D?gdpr=1&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
200 OK 28 B URL HTTP/2 optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
IP
Hash 3f48dd894e32b50dab267e0ae1dc072d
cdc8edb0a675e6a44fc294db45a7487f017a0d25
71a904ba726ae38a8aa08425bae824e9850452b5c41a182bdc526a139ba3a9bc
GET /a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247 HTTP/1.1
Host: optimized-by.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/xml
content-length: 28
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
server: nginx/1.21.4
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
pragma: no-cache
set-cookie: khaos=LCQJMEX9-1S-88BK; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qodFkV0N9U6SO9DtVM30fCgNnCcwqdpkjS1ShuCKoxfEfrE8rE6QZLoM5lQcvoTvdzNpGeyS5O/ttAPlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXfJx3iDpM-UsO66uPdEaUmAJZaAwWww2wykQSHEYml2S2bCk8M5VTzu9KIjCabUbkdLCke_LZC8AUG5mxyPyDX61NEKADZkno2gCJzQ94kg4yVKMujmNnBNOuZ4Wr_xKcidn-j3CmSR7-I-iKxqAUBWtP91UibAJgBUFW37vK9-YIKt65H4aY1NRcA_vlCv8Nn2JXdlg-QW4rk9QjkchibnCyyQA
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXfJx3iDpM-UsO66uPdEaUmAJZaAwWww2wykQSHEYml2S2bCk8M5VTzu9KIjCabUbkdLCke_LZC8AUG5mxyPyDX61NEKADZkno2gCJzQ94kg4yVKMujmNnBNOuZ4Wr_xKcidn-j3CmSR7-I-iKxqAUBWtP91UibAJgBUFW37vK9-YIKt65H4aY1NRcA_vlCv8Nn2JXdlg-QW4rk9QjkchibnCyyQA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXfJx3iDpM-UsO66uPdEaUmAJZaAwWww2wykQSHEYml2S2bCk8M5VTzu9KIjCabUbkdLCke_LZC8AUG5mxyPyDX61NEKADZkno2gCJzQ94kg4yVKMujmNnBNOuZ4Wr_xKcidn-j3CmSR7-I-iKxqAUBWtP91UibAJgBUFW37vK9-YIKt65H4aY1NRcA_vlCv8Nn2JXdlg-QW4rk9QjkchibnCyyQA HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 10 Jan 2023 18:05:13 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2023 18:20:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 10 Jan 2023 18:05:13 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 352d7a7af93083f26d1bca04e478eed2
5d59416822e016ad4af1987871414d35d794b29c
423a619c9619448bcdf4bc3934c442f20db716e7bef4f64e0fba85bf33c87f72
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=13593831044&lsavail=0
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=13593831044&lsavail=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.12.0&cb=13593831044&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 718
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.file.io
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXciR_T5gsG9AWXHaZ0coEXlLGDbcp5OJAcCmUGGkQaQoEXr4h8822RGLzXbWuGBzOesBaX1EPT3bwWacuNSDW8Cg4VLWdB0KpBtqaCxdeS8tVx2sEiC3fskWww_i1N2s0WwAVT5jq3c_4vuNXyt2ER9fmbqQr9qRhzg6GuKC6eCjGjj67T2WTXNeqlGUIbjXtw2u7-7HZwAZxmeL-AF6MpkHfw3A
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXciR_T5gsG9AWXHaZ0coEXlLGDbcp5OJAcCmUGGkQaQoEXr4h8822RGLzXbWuGBzOesBaX1EPT3bwWacuNSDW8Cg4VLWdB0KpBtqaCxdeS8tVx2sEiC3fskWww_i1N2s0WwAVT5jq3c_4vuNXyt2ER9fmbqQr9qRhzg6GuKC6eCjGjj67T2WTXNeqlGUIbjXtw2u7-7HZwAZxmeL-AF6MpkHfw3A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbbe/pixel?d=CN-KGhDw3uOiAxjn0YzGATAB&v=APEucNXciR_T5gsG9AWXHaZ0coEXlLGDbcp5OJAcCmUGGkQaQoEXr4h8822RGLzXbWuGBzOesBaX1EPT3bwWacuNSDW8Cg4VLWdB0KpBtqaCxdeS8tVx2sEiC3fskWww_i1N2s0WwAVT5jq3c_4vuNXyt2ER9fmbqQr9qRhzg6GuKC6eCjGjj67T2WTXNeqlGUIbjXtw2u7-7HZwAZxmeL-AF6MpkHfw3A HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 10 Jan 2023 18:05:13 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2023 18:20:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 10 Jan 2023 18:05:13 GMT
cache-control: private
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
File type ASCII text, with very long lines (18728)
Hash 4de18ca9d1fd7a4909bbd1d8a7af3af7
ceec2534f3e6b5c015d3d01d83e8f224bda697e1
a07dec0a4ea263acc1bbada3433f0afb453c618ed57e08ddb88c89729c35c771
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Tue, 10 Jan 2023 04:31:30 GMT
Content-Encoding: gzip
Content-Length: 10066
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=37534
Expires: Wed, 11 Jan 2023 04:30:47 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
status.geotrust.com/
200 OK 471 B IP
Hash 1c2849ae7041bb4af33cdb3c2ab6b677
9e3666cad959f90f4fd1c4811911305a86c2a1d0
1d5cfecdedf09f7aa98cf3f02be21c564a225c93e6667eadd2c30a7e39768b2e
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 562
Cache-Control: max-age=110491
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Etag: "63bcb342-1d7"
Expires: Thu, 12 Jan 2023 00:46:44 GMT
Last-Modified: Tue, 10 Jan 2023 00:37:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash e9bedc03b08e2b8de1760af9356c3a5e
1dd97fa5366c0977f3d1ac76f27f2bef29d9427c
0b9a15a7ee7b99ba23d20e06611cac29f6f9401dcfa6e5cd243ce29e1dd2e373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 09 Jan 2023 11:23:23 GMT
Expires: Mon, 16 Jan 2023 11:23:22 GMT
Etag: "1dd97fa5366c0977f3d1ac76f27f2bef29d9427c"
Cache-Control: max-age=493688,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756ed1bc9b4f9-OSL
sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=56&pid=5f2063121d82c82557194737&key=84a1030c-f62e-4cde-9f58-f7fc5b1a9f40&gdpr_consent=null&gdpr=1
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=56&pid=5f2063121d82c82557194737&key=84a1030c-f62e-4cde-9f58-f7fc5b1a9f40&gdpr_consent=null&gdpr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=56&pid=5f2063121d82c82557194737&key=84a1030c-f62e-4cde-9f58-f7fc5b1a9f40&gdpr_consent=null&gdpr=1 HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
X-Firefox-Spdy: h2
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding,Origin,Accept-Language,X-CSRF-Token,x-unruly-override
access-control-max-age: 1728000
content-type: text/plain charset=UTF-8
content-length: 0
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 555
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Tue, 10 Jan 2023 18:05:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=200&key=OPTOUT
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=200&key=OPTOUT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=200&key=OPTOUT HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
set-cookie: 2_C_200=OPTOUT; Path=/; Domain=aniview.com; Expires=Wed, 11 Jan 2023 18:05:13 GMT; Secure; SameSite=None
2_C_200=OPTOUT; Path=/; Expires=Wed, 11 Jan 2023 18:05:13 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 16 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (36069)
Hash f39072f78771cb7df1b9755f5a8b038d
c1837bc15137dd0527b68dcd178ab8331021ec08
81b62b3f30b05986d35f5bc3b4c0ce138d7b29edefb96993dd3f39bbedee0450
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48956
date: Tue, 10 Jan 2023 18:05:13 GMT
expires: Tue, 10 Jan 2023 18:05:13 GMT
cache-control: private, max-age=3000
etag: "1673267917225388"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee97269581604036fc250bde8e96d8dc
725b7ccc6cc4ee0a68832576f52f0a75b7fb7850
a2a85b0b3a579b0dacb66028b81b7594f6f1715f3e1e352334eb6331934da88a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2A85B0B3A579B0DACB66028B81B7594F6F1715F3E1E352334EB6331934DA88A"
Last-Modified: Mon, 09 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16415
Expires: Tue, 10 Jan 2023 22:38:48 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee97269581604036fc250bde8e96d8dc
725b7ccc6cc4ee0a68832576f52f0a75b7fb7850
a2a85b0b3a579b0dacb66028b81b7594f6f1715f3e1e352334eb6331934da88a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2A85B0B3A579B0DACB66028B81B7594F6F1715F3E1E352334EB6331934DA88A"
Last-Modified: Mon, 09 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16415
Expires: Tue, 10 Jan 2023 22:38:48 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
sync.aniview.com/cookiesyncendpoint?biddername=9&key=95a841b30b6135eeff943afbd1b74f5&_fw_gdpr=1&_fw_gdpr_consent=
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?biddername=9&key=95a841b30b6135eeff943afbd1b74f5&_fw_gdpr=1&_fw_gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?biddername=9&key=95a841b30b6135eeff943afbd1b74f5&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
X-Firefox-Spdy: h2
sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=10&pid=59c9148628a0612da3689288&key=1Fhs7OXN968g&ev=1&us_privacy=1---&pid=562704
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=10&pid=59c9148628a0612da3689288&key=1Fhs7OXN968g&ev=1&us_privacy=1---&pid=562704
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=10&pid=59c9148628a0612da3689288&key=1Fhs7OXN968g&ev=1&us_privacy=1---&pid=562704 HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
X-Firefox-Spdy: h2
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1579
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
prebid-server.rubiconproject.com/openrtb2/auction
200 OK 174 B URL HTTP/2 prebid-server.rubiconproject.com/openrtb2/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3ff05194fc02927456643a7db6d1a4a0
dbc3c745caa1b15a7f55514666226cdc9ff91e21
f720983ded8e09d52b1597cc492ed11f014de0ec3b58120ca0930d623ed084a2
POST /openrtb2/auction HTTP/1.1
Host: prebid-server.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1745
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/json
content-length: 174
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
x-prebid: pbs-java/1.106.0
content-encoding: gzip
X-Firefox-Spdy: h2
search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
204 No Content 0 B URL HTTP/1.1 search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /openrtb/2.3/dados/307068?src_sys=prebid HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/json
Connection: keep-alive
Set-Cookie: audience=5452f67d-9111-11ed-8a2c-1fe3cd8f0006; path=/; domain=.spotxchange.com; expires=Wed, 10-Jan-2024 18:05:13 GMT; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 023
X-SpotX-Timing-Page: 0.166076
X-SpotX-Timing-Page-Require: 0.000386
X-SpotX-Timing-Page-Context: 0.003938
X-SpotX-Timing-Page-URI: 0.000015
X-SpotX-Timing-Page-Mux: 0.001041
X-SpotX-Timing-Page-Cookie: 0.000027
X-SpotX-Timing-Page-Exception: 0.000000
X-SpotX-Timing-Page-Misc: 0.003065
X-SpotX-Timing-SpotMarket: 0.156578
X-SpotX-Timing-SpotMarket-Primary: 0.013215
X-SpotX-Timing-SpotMarket-Secondary: 0.143363
X-SpotX-Timing-Transform: 0.001026
hal9000.redintelligence.net/zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1668), with CRLF line terminators
Hash 9acfc80ec28c58a7175203fd11d5ec8e
2504e6154ce0024bdbb7791c43c8ecf6af7a0c53
020492d8db745ce05a62695def7b9b9d5bc0a4b347977e767c6ac7e824cb60f5
GET /zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4087
Connection: close
Content-Type: text/html; charset=UTF-8
hal9000.redintelligence.net/zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1662), with CRLF line terminators
Hash bfd00168a4bd6e3f3a32b1eb0c0c1502
90c9a82f0b888fa7c46ad478d4b5b75e6e04c967
12d6a7c93683c3bd683d650e47eb3035fb1b1b4e4f4ebdb44e129fa58173dae3
GET /zone/j3skijamt464?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4084
Connection: close
Content-Type: text/html; charset=UTF-8
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 556
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1687
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache, no-store, must-revalidate
date: Tue, 10 Jan 2023 18:05:12 GMT
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1449
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
prebid-server.rubiconproject.com/openrtb2/auction
200 OK 174 B URL HTTP/2 prebid-server.rubiconproject.com/openrtb2/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 403cf766ba583ccba2592c0844cfbd57
3f8e761a3e1ec0a8d4d2bb0d8ce85efda56774c5
c1393e0cb214bd5fd1c69666cb1ccb06005a323f9f506defd0efb354b6273b49
POST /openrtb2/auction HTTP/1.1
Host: prebid-server.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1745
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/json
content-length: 174
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
x-prebid: pbs-java/1.106.0
content-encoding: gzip
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1448
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=70852626018&lsavail=0
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=70852626018&lsavail=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.12.0&cb=70852626018&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 718
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:12 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.file.io
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373899826&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri=
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373899826&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&&copid=5f2063121d82c82557194737&nid=59c9148628a0612da3689288&cocid=6374ee512c8ca8606841c0a8&ncid=5fad56bb6a4f3e0cc41067ef&coasid=631742cf4864f704787dda76&e=request&cb=1673373899826&asid=624c0a0dc3ddce30871b2de4&ofpr=0.684&fpo=&ri= HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=; 2_C_200=OPTOUT
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373899825&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C5ff5868b4c1613054b3b5ee4%2C5ffffc9e712b1564036ba7e2%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373899825&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C5ff5868b4c1613054b3b5ee4%2C5ffffc9e712b1564036ba7e2%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373899825&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C5ff5868b4c1613054b3b5ee4%2C5ffffc9e712b1564036ba7e2%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=; 2_C_200=OPTOUT
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
204 No Content 0 B URL HTTP/1.1 search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /openrtb/2.3/dados/307068?src_sys=prebid HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 606
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/json
Connection: keep-alive
Set-Cookie: audience=54893d51-9111-11ed-977a-1365eaaf0006; path=/; domain=.spotxchange.com; expires=Wed, 10-Jan-2024 18:05:13 GMT; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 006
X-SpotX-Timing-Page: 0.048744
X-SpotX-Timing-Page-Require: 0.000358
X-SpotX-Timing-Page-Context: 0.004247
X-SpotX-Timing-Page-URI: 0.000014
X-SpotX-Timing-Page-Mux: 0.000895
X-SpotX-Timing-Page-Cookie: 0.000029
X-SpotX-Timing-Page-Exception: 0.000001
X-SpotX-Timing-Page-Misc: 0.003740
X-SpotX-Timing-SpotMarket: 0.039104
X-SpotX-Timing-SpotMarket-Primary: 0.012062
X-SpotX-Timing-SpotMarket-Secondary: 0.027042
X-SpotX-Timing-Transform: 0.000356
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1581
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b6814de21e79e28c4a59b9bef50020cb
5d6fcbdd6b70933b9367226523ce68364a1f0f1b
49821c9c4c570ff4e089276c96b05cef53c725e77e34f6c772d2b932e7c81c2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899858&pKey=1686566645&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899858&pKey=1686566645&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
IP
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373899858&pKey=1686566645&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247 HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Credentials: true
x-sticky-vk: 1673373913696034-359
Expires: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=7680893b3439c684aa13a9c58bde46f3; Domain=ads.stickyadstv.com; Expires=Thu, 09-Feb-2023 18:05:13 GMT; Path=/
ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=159234
200 OK 5.6 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=159234
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15889), with no line terminators
Hash 18a6bc0e051c0767f814f63ff07e65f9
8fbe4eb399d8501b90276723d38c9ffb4ab483fa
26341482a8d6c8384b2cb91aba95833ac2002bd284ff690adbd2009bf76cb95b
GET /AdServer/js/user_sync.html?kdntuid=1&p=159234 HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Dec 2022 06:36:49 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5554
content-type: text/html
cache-control: max-age=149109
expires: Thu, 12 Jan 2023 11:30:22 GMT
date: Tue, 10 Jan 2023 18:05:13 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2791)
Size 126 kB (125837 bytes)
Hash d41f9eb373f6d389916d2354e8106f45
92822b81e8af2d74ff91b05dc563155584696144
6a7265e29c29d383677a1a779b58337c684fd85847d7106a1ac46b91eef6ee69
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 125837
date: Tue, 10 Jan 2023 18:05:13 GMT
expires: Tue, 10 Jan 2023 18:05:13 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
IP
Hash a42778dbf003f1ac7d4e3f93b7fbc6da
d26c0ede16517f98f6e353b9c94094e00d3aaf0b
59793f15ad7a055723abea41baa4d84b5f539fa99653f65fab69d12b6547290b
POST /s/gts1d4/fXs_L39cqkM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b6814de21e79e28c4a59b9bef50020cb
5d6fcbdd6b70933b9367226523ce68364a1f0f1b
49821c9c4c570ff4e089276c96b05cef53c725e77e34f6c772d2b932e7c81c2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hal900029.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=c0cbda696b&subid=&uid=5e3fb8b02c142dc2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=2371194996884&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900029.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=c0cbda696b&subid=&uid=5e3fb8b02c142dc2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=2371194996884&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=c0cbda696b&subid=&uid=5e3fb8b02c142dc2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=2371194996884&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 10 Jan 2023 18:05:13 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 10 Jan 2023 18:05:13 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb; expires=Mon, 10-Apr-2023 18:05:13 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=c0cbda696b&subid=&uid=5e3fb8b02c142dc2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCcO9x2Ki9Y6SYHtCB-cAPx9uegAHJuaKcacytzc7VD_AuEAEgg5vTaWDDhICAmBjIAQmpAtLo_fsGBrI-qAMBqgTlAU_QD403wRbvBYirX_QbN2BgSIXm4pGjjRDLnxk55qf1oNw0xADYfGbx34dtFoLOPMj9PFPdCkUsTAem8rxxRBpH070yDlsBbz4ZiRLyV4rlJ4h90kc8rLKkif0ItztPX8nMv6h7d5sdI7bJ3KDAivUMghuCsN7SCG9-Y8vev4aacq0dp6_1XGbPRumwVs_VaRIl4IwHYPBZavUjxgodfSKimwDY__4B5nnvf1HatAca3kPUJY4bw94H4DDqR5B74gqpcyuz4EvUcZIE7-HXJ9HB7o8HEGbZbl0qTzzJ7Hy2awX0ZQjABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9EmHHlji7YLk_AwCpUp-DGDRhlXNN6aE9ROivXLiFevR6fW3NoD39A1OMiBhFzCnZHqyq81beNNgG_6QOEfu-PLxGilcCMxgBIBM%26sig%3DAOD64_0R3EsSiFHkmYHSymLPL1eztU9K2w%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-B5NbaLfiavDhMvf9WxahfCqpcuRsflAFuOudLUPinneJdWhUKA8vGFC5H7X1v8sadrl7sYPjf59PD5tPcYDMOm1w2m7duhxKh46dm2YRZp0KtGbXqdwv4Jglg260Rrp7ggRehgFl24HHUsO5S83RgmHQl4D0dEih_CwHDEWpIBo90XuXg%26cry%3D1%26dbm_d%3DAKAmf-CNELzWMY6fD31r2ajgIsMbWVs2bTm9QWvYVJ7WXIO4pAvRM8ScRCv-YpqJWcpL65MOGZudjxjnMmKs_8JCT3E41V2Frow6Ci_L5m2pRLQZCzgxQ73jkJEjn4iKL9eb9aRH7G3nDBeseHMwisl2cSqMRy5-W5jTMzCyQdajyEpE85BJUOeIvI3MI5me0tTJ_Nq5vhGlBj2FscQH--GcFoErmNkSV1emhWTS--d9qGHnQo_yFV0TYHiBjt6Mtp9IliRx8kkEcNmvYVE1P3esM55B9GjxDkjAno6-UEf_oBPAkxg7JZ0mCvkRU_PnD7vmnJk6QUMPqB-6ZJwpHubCiLmfMyIOeH_dK-CRpZq26Bt5ePfAgB3qH0PwPFdqC5V6EXbeXh7Q9gsAFnLT2_QZminYOIduOWhIai5tGlMryNyI68YgYjoXVsVpOC9ygnLF1P-uw5mTAgup0esRH5TCuGzsRQdYuvOWGeenfdW5Jsqf8Fc1w0kk6MarrKL4JlytkvOPA6t95gy_kDHZrW0KN-KQk8SPY9zA2kY-fV_mWNxdLkKbMEU%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=2371194996884&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 11 Jan 2023 18:05:15 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66f98ac769348f36643c21e206b4b16b
9ca8f8ccc04bd53840de07083bdf7a263a376cd4
68a4b945bf8c4519dd3733cbebd4f7f1fe05271a93bba5d3bff25707551f3845
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68A4B945BF8C4519DD3733CBEBD4F7F1FE05271A93BBA5D3BFF25707551F3845"
Last-Modified: Mon, 09 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Tue, 10 Jan 2023 21:11:36 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2166f11e11d12ebe46705ce853e14730
d7f16494d91106243c0e88ecb828ad8b1ce8c1c6
cb89c9055df1c17e1c586168f4b31bc5fe421ba19a0a0da72dd75669de045c62
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 08 Jan 2023 01:42:54 GMT
Expires: Sun, 15 Jan 2023 01:42:53 GMT
Etag: "d7f16494d91106243c0e88ecb828ad8b1ce8c1c6"
Cache-Control: max-age=372459,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756f1beb2b4f3-OSL
hal900023.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900023.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900023.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 10 Jan 2023 18:05:13 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 10 Jan 2023 18:05:13 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=3322c2d9c0bb0880; expires=Mon, 10-Apr-2023 18:05:13 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 11 Jan 2023 18:05:15 GMT
Date: Tue, 10 Jan 2023 18:05:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 76239c0b2c416fc8cc40937f267f0786
6bbb0212bb2075a27768172cdc5c8942b9537d6c
256705b513cbb44f4a69b2b0d13bf5992b202a65d497db0065ac764c1e4017f8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 14 Jan 2023 14:27:03 GMT
ETag: "6bbb0212bb2075a27768172cdc5c8942b9537d6c"
Last-Modified: Tue, 10 Jan 2023 14:27:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1688
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 787756f1ff59b511-OSL
ap.lijit.com/pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D18%26key%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D18%26key%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?us_privacy=1---&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D18%26key%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Tue, 10 Jan 2023 18:05:13 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap1ams1
id5-sync.com/api/config/prebid
200 135 B URL HTTP/1.1 id5-sync.com/api/config/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3820827ae633fcff70376abb3872aae4
1d5a0ccadf1dce5a7f8f6d88fd03d7fe5b2341b1
8ef51c3a9a54b187c1cbc44cb7f6788c5e0fb022040e9e0880cd3473c7ee425b
POST /api/config/prebid HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 122
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=2173
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=2173
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=2173 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lexicon.33across.com/v1/envelope?pid=0010b00001rrIFkAAM&gdpr=0
200 OK 49 B URL HTTP/2 lexicon.33across.com/v1/envelope?pid=0010b00001rrIFkAAM&gdpr=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c466bd434db29cf02793f8522fde5f3a
f39a01bb0264479dbe9a4bfb0b80ae0b3b0e8154
d0d2e098cd489ef7bc528c86de8ab5c51b5d6cdf9b76a8b08766036992f0d2f4
GET /v1/envelope?pid=0010b00001rrIFkAAM&gdpr=0 HTTP/1.1
Host: lexicon.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: private, must-revalidate, max-age=28800
content-type: application/json
content-length: 49
date: Tue, 10 Jan 2023 18:05:13 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=zwqtqe4&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=zwqtqe4&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4c97013bd67a5505c057df7414901fc6
c874f054bb7dc20800fe0f66cfaed65a97f21cfd
144c5b997198bf25473d6d11cf689d63214e8e1c0799023c9d064fbbc01d1c6e
GET /track/rid?ttd_pid=zwqtqe4&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Thu, 09 Feb 2023 18:05:13 GMT
vary: Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
IP
Hash a42778dbf003f1ac7d4e3f93b7fbc6da
d26c0ede16517f98f6e353b9c94094e00d3aaf0b
59793f15ad7a055723abea41baa4d84b5f539fa99653f65fab69d12b6547290b
POST /s/gts1d4/fXs_L39cqkM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2166f11e11d12ebe46705ce853e14730
d7f16494d91106243c0e88ecb828ad8b1ce8c1c6
cb89c9055df1c17e1c586168f4b31bc5fe421ba19a0a0da72dd75669de045c62
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 08 Jan 2023 01:42:54 GMT
Expires: Sun, 15 Jan 2023 01:42:53 GMT
Etag: "d7f16494d91106243c0e88ecb828ad8b1ce8c1c6"
Cache-Control: max-age=372458,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 787756f26f91b4f3-OSL
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash 32a1bf0a25e59feb4e4e14c0e6268da3
d63c00723a83001d9a578e4fc424ebc87cfcdd66
40f73ed285da091f2e23c2d5aaa0a02723011521eb67dcbb40cfe4cca7aab38a
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Mon, 10 Apr 2023 10:50:19 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Tue, 10 Jan 2023 18:05:13 GMT
content-length: 60
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1
200 OK 534 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 1393ecdd1c86ea9500dba4d771c98d8c
f609064959e586574151c298fe95ff6ba19d8eae
5c388b5b6cb7b3117cdb98dbbe3b6bda932667f300bc11562f7a7a6951a8d371
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://www.file.io
server-processing-duration-in-ticks: 502866
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f8395eadf53bcf58328ffa636f943a44
47ffbf341873e182b5e1494033f1962c689c854a
ada129a2cb61c44093addd356a3d038fdb2e6346174bd2c40824e3193fe13928
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 27d0e744-1c64-4a3e-95f5-4ab956c0cdfe
Set-Cookie: uuid2=7866948818854451083; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Tue, 10 Jan 2023 18:05:14 GMT
expires: Tue, 10 Jan 2023 18:05:14 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
200 OK 28 B URL HTTP/2 optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
IP
Hash 3f48dd894e32b50dab267e0ae1dc072d
cdc8edb0a675e6a44fc294db45a7487f017a0d25
71a904ba726ae38a8aa08425bae824e9850452b5c41a182bdc526a139ba3a9bc
GET /a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247 HTTP/1.1
Host: optimized-by.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:14 GMT
content-type: application/xml
content-length: 28
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
server: nginx/1.21.4
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
pragma: no-cache
set-cookie: khaos=LCQJMFNM-17-CJAK; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qouMd2RBuQECe9DtVM30fCgNnCcwqdpkjQmP2cJNMLA5frE8rE6QZLoM5lQcvoTvdzNpGeyS5O/ttAPlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
go1.aniview.com/api/adserver/tag/?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5&AV_VIDEOURL=https%3A%2F%2Fcontent1.avplayer.com%2F6006a32f94a1ea4fe84a39a6%2Fvideos%2F625edad12c2bbd0fa201f6f6%2F625edb3e2d0dea26100d8f63%2Fvideo.mp4%3FAV_TAGID&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&AV_CHANNELID=6374ee512c8ca8606841c0a8&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.file.io&AV_DADPOS=1&AV_TAG=6374f8665f2f007d23421195&AV_TEMPLATE=62f50abe103ae32adf5785c8&d36=6.2.71&responsive=1&sver=3&avtoken=897827&omv=1.0.1&AV_D65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&AV_WIDTH=440&AV_HEIGHT=247&AV_DNT=0&cb=1673373897830&wfc=1
200 OK 5.0 kB URL HTTP/2 go1.aniview.com/api/adserver/tag/?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5&AV_VIDEOURL=https%3A%2F%2Fcontent1.avplayer.com%2F6006a32f94a1ea4fe84a39a6%2Fvideos%2F625edad12c2bbd0fa201f6f6%2F625edb3e2d0dea26100d8f63%2Fvideo.mp4%3FAV_TAGID&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&AV_CHANNELID=6374ee512c8ca8606841c0a8&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.file.io&AV_DADPOS=1&AV_TAG=6374f8665f2f007d23421195&AV_TEMPLATE=62f50abe103ae32adf5785c8&d36=6.2.71&responsive=1&sver=3&avtoken=897827&omv=1.0.1&AV_D65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&AV_WIDTH=440&AV_HEIGHT=247&AV_DNT=0&cb=1673373897830&wfc=1
IP
Hash 828c55cbdf0a70286392cb580fdbc2b9
497926162e5ba7cd9068ccd6d4fa486b21d0bf19
8472a3c00910b04c2ea2a678799b34585814dd1575985b54fce30046dc5e4c3d
GET /api/adserver/tag/?AV_TAGID=6374f8665f2f007d23421195&AV_PUBLISHERID=5f2063121d82c82557194737&AV_LOADID=df008af700481683fa09eee072113f48&AV_PLACEMENTID=6373750d98fb531abee85ae5&AV_VIDEOURL=https%3A%2F%2Fcontent1.avplayer.com%2F6006a32f94a1ea4fe84a39a6%2Fvideos%2F625edad12c2bbd0fa201f6f6%2F625edb3e2d0dea26100d8f63%2Fvideo.mp4%3FAV_TAGID&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=625edad12c2bbd0fa201f6f6&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&AV_CHANNELID=6374ee512c8ca8606841c0a8&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=www.file.io&AV_DADPOS=1&AV_TAG=6374f8665f2f007d23421195&AV_TEMPLATE=62f50abe103ae32adf5785c8&d36=6.2.71&responsive=1&sver=3&avtoken=897827&omv=1.0.1&AV_D65=IntentIQ&clsid=be62ca6f-f97f-4b4e-891f-73c51c6d97cb&rando=42&AV_WIDTH=440&AV_HEIGHT=247&AV_DNT=0&cb=1673373897830&wfc=1 HTTP/1.1
Host: go1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:12 GMT
content-type: application/json
vary: Accept-Encoding
set-cookie: aniC=1673373912406-931371827337-006399-011-001390; Expires=Mon, 30-Jan-23 18:05:12 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
aniC=; Expires=Mon, 30-Jan-23 18:05:12 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
expires: Fri, 30 Dec 2022 04:18:32 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash a9303b4d947ce3811d5f4d759988b0ed
388d906f9ec3feea81e7e189f68120fe5e6738b7
ce9036c308e97c69281f0ff10f4f59b2228429be275b6ca4fc3a48354cc86277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6072
Cache-Control: max-age=162747
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:14 GMT
Etag: "63bd69de-13a"
Expires: Thu, 12 Jan 2023 15:17:41 GMT
Last-Modified: Tue, 10 Jan 2023 13:36:30 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 314
id5-sync.com/api/config/prebid
200 135 B URL HTTP/1.1 id5-sync.com/api/config/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3820827ae633fcff70376abb3872aae4
1d5a0ccadf1dce5a7f8f6d88fd03d7fe5b2341b1
8ef51c3a9a54b187c1cbc44cb7f6788c5e0fb022040e9e0880cd3473c7ee425b
POST /api/config/prebid HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 121
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
eus.rubiconproject.com/usync.html
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Tue, 10 Jan 2023 18:05:14 GMT
Connection: keep-alive
Vary: Accept-Encoding
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 12378da8a4389644868b497b42f9915d
411deb192c4ca09f4aa76516106a93a47797f62f
c974dc7c0d00a998719fd9f9ee3b933d9b0efda590f6de0a7635e5809f814902
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f8395eadf53bcf58328ffa636f943a44
47ffbf341873e182b5e1494033f1962c689c854a
ada129a2cb61c44093addd356a3d038fdb2e6346174bd2c40824e3193fe13928
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:14 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=I_ez5l80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkJXcGpMUk9HQjNtWEtFb2JkN1ZRcE1OZHhTSXpoNFRxJTJCNjk2MFcwaUx0; expires=Sun, 04 Feb 2024 18:05:14 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.file.io
server-processing-duration-in-ticks: 306587
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.stickyadstv.com/auto-user-sync
200 OK 43 B URL HTTP/1.1 ads.stickyadstv.com/auto-user-sync
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /auto-user-sync HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/gif
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1673373914165079-430
Expires: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: UID=d03d1adbd812bf8e2d679ac4106f995f; Domain=ads.stickyadstv.com; Expires=Thu, 09-Feb-2023 18:05:14 GMT; Path=/
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0278ec20b07c6d3d772e289a33fb017e
64d86936cd7b7df0fe72bb3f7eacff3e317d19ba
15b666ad88c28a7c0f10fb15017cd4c8c2b22b7672d9a7e9d36b5a4752467ab8
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
hal900023.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 511 B URL HTTP/1.1 hal900023.redintelligence.net/request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash b4b600f9e9ef3514747174a836a1a222
827a98a8e6fa85e16e6383646836ac016108d406
cffe5cc597330907fe837def914e63a6b97d130987a2f37d3b5de9e7ea35bf47
GET /request.php?zone=j3skijamt464&nw=20&renderingType=javascript&namespace=a939bc3efa&subid=&uid=79e9543dc03bd62d&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=970x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC9Fhi2Ki9Y-StHs-NiQahmKwYybminGnMrc3O1Q_wLhABIIOb02lgw4SAgJgYyAEJqQLS6P37BgayPqgDAaoE6wFP0DAh4wWSq-7J51snWo4f6K13ZyI62Z1n4b_XKfQTSHdUdAgqtutDoyL1tuwGPEQ73Sm1Qhe0BI9VUJK0DPoUdrtDHF6jbKAeVnTeQGnhVhYCaWGr14N4ITptRWuSKeBZwihdW2j3vZjzzPqC5X1H4S5f5vCiT-QIsQCRZw4WR2zCFqkDXJBg1zfwpu6pqeSUytOjZlJRY9T3l-dBVMpGuk2-q4PZJsM2WYeEctQOd4Cn0vYFP8u6llGIEpebCKodRluCrGva7fwsy2QwBRMRz2CakZGKMDtYpBe2v83E2X1psZeurvYtkSFswATBvZT88wPgBAOQBgGgBk2AB6yt9Z8DqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIEQiA4YAQEAEYHTICqgI6AoBAgAoDmAsByAsBgAwBsBOcos0O0BMA2BMD2BQB0BUB-BYBgBcB%26ae%3D1%26num%3D1%26cid%3DCAQSTADq26N9KTnd-ljEkTZYz3kaEJu7i-O8FlDZg7Hh-mIXAY4n44fUmA3wYZgdcdzf66rg0MhcFJCoMJOhGdZtGTlqykYkfS-_W01xEqEYASAT%26sig%3DAOD64_2kfvNnDp8VkKBVLjUeuwEV0PSwiQ%26client%3Dca-pub-5781531207509232%26dbm_c%3DAKAmf-ACHQ6TqUVz6dhSYhOCcb9DK0Ja8M__GBWzYncfHuXyyTQzOB7SAUFSmPdLy3AkIAj2WMSoZUD1jUMvu_FyCn8ZXYWgqWQ3EeXlsxSk-L47cq-ArbNoNHFTKYzWdvJWzbRrh7hgF6BlW2EMBmYZTC1aU6syzr-W6RPSg_vL8k_3s7Hm0ac%26cry%3D1%26dbm_d%3DAKAmf-AyoukYqGG97oR_AfnenJN538doDRA9n1c_f19YthisvMd6ZkVDqiejiVQHiKXyYwSqdr7e-8HtB29qRDpRC7oP6ZyaheMtAO0A5Fnhgd_Wi6cba5DZmttHntc5uz24EyYilNjenk07NLrHMgmfY42pGJjdUBJntvxeRgr7r7oWa5nj9ng2kEFSuTz59vKlPx_nw-T1oUjVO1jd44jgIAL_6UHPF-JXt9q8UY_Wk86TdXS4Q5W5XCgvCxCz1JTqb9e-J3b8EvdrP-LiOUA6PRaOcvsxhWaalAcxs9esl5fgTgKDeSxWGc2_3HOwUI0qV1wPYYNI2TOXCEP5CD1_0HDg8cDUg8g2urvU9rV9E_MIZZ6aHDeOXvRzU8C8dYo1TwtCHD2kjoRvvLQl3BNStsrrPggB5CPg15SoiYVduTszVRipusekb3l4MeXWEhbhq5Rf2JMXmTwkPQkuwYv4J9loiRZzR6S_JS8__HhKG4Tdk_lRh_2urW9rnj4gectpfOqjR6Oye31Oi1JcPxzj-Q0zbcRhVad0H0GJyl0ICUopsi-BZxw%26adurl%3D&documentReferer=https%3A%2F%2Fwww.file.io%2F&ancestorOrigins=null&random=9618741965780&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900023.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:14 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 10 Jan 2023 18:05:14 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb; expires=Mon, 10-Apr-2023 18:05:14 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 56046000190250704438336012200023
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 511
Connection: close
Content-Type: application/x-javascript; charset=utf-8
www.file.io/ed516ccec82792e61eba5551e335b957b2d7d02c-6ae9c8365097e016cebe.js
200 OK 30 kB URL HTTP/2 www.file.io/ed516ccec82792e61eba5551e335b957b2d7d02c-6ae9c8365097e016cebe.js
IP
File type ASCII text, with very long lines (46303)
Hash 5d1a04ef654db42f375f1e0fe8e2df17
668517cf026d25cd748bbcdd5077aa2cbab6411f
739c5f68438c742db40925e69e05ed34cc8027856dd39de901d9a358686cc1e1
GET /ed516ccec82792e61eba5551e335b957b2d7d02c-6ae9c8365097e016cebe.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: tQV8auO35yKoUa2rrUv8XbFxQl9MFdrhf7PEfoJ7oDcI8CJ5MszYTkfRItV/QWzf0dJZXs7Yky0=
x-amz-request-id: F727GBF2FMQ4YWDR
date: Sun, 11 Dec 2022 01:06:49 GMT
last-modified: Wed, 23 Nov 2022 15:26:43 GMT
etag: W/"83f8c9e26a69db93869cfcef32de2315"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b6IsguiS-JsTG5383JgCRcyAgd--u_pfXuqWloalxR7RCYhX9Lx0HA==
age: 2653101
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 41e7f8a2-d4dc-4a1f-a441-17e6f451faf0
Set-Cookie: uuid2=2942055189877985338; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: fa3039bc-45c1-424c-b1f3-7a7dc9511d76
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
id5-sync.com/g/v2/258.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/258.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ddf68d26bbf2eb0407f50e54d567f40a
854b1867a7f0c5249d34ca04149395ed3d2aadc9
174e47b53c5ee055cc7046a3a5a03d13c5402ae2fae963be54dee4f11cd58346
POST /g/v2/258.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 266
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:14 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
id5-sync.com/g/v2/258.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/258.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84cf2ff1032d338c520378ccd2645ed2
0d94c44c3f8e23d8a60f2dc11ff07e60deb482fd
d056f94c2738e1a8a8c57b0e218b70074e0ad9d2d6b0b6a75f45aa264221df8c
POST /g/v2/258.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 265
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Tue, 10 Jan 2023 18:05:14 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1524
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:14 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3D7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
200 OK 953 B URL HTTP/2 ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3D7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720), with no line terminators
Hash 499546dec064c08e4c7c354bab138f7f
f155d071d071e4e7c1d45e22943915df9d9f2b75
1a9219bc3962479cfa6ff0ca64e2f810aab8b816ae4f937b252d0ca044d693b4
GET /AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3D7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://simage4.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2016 09:36:32 GMT
etag: "fa18f0-6b8-53a413358bd01"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 953
content-type: text/html; charset=UTF-8
cache-control: max-age=114869
expires: Thu, 12 Jan 2023 01:59:43 GMT
date: Tue, 10 Jan 2023 18:05:14 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 633
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Tue, 10 Jan 2023 18:05:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=30216375755&lsavail=0
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0&cb=30216375755&lsavail=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.12.0&cb=30216375755&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 718
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.file.io
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1524
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:14 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D10%26pid%3D59c9148628a0612da3689288%26key%3D%25%25VGUID%25%25
302 Found 0 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D10%26pid%3D59c9148628a0612da3689288%26key%3D%25%25VGUID%25%25
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bh/rtset?pid=562704&ev=1&us_privacy=1---&rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D10%26pid%3D59c9148628a0612da3689288%26key%3D%25%25VGUID%25%25 HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-548d8dffc6-ng8hw
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
set-cookie: ccpa=1---;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 09-Feb-2023 18:05:13 GMT;Max-Age=2592000;SameSite=None
V=1Fhs7OXN968g;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 05-Jan-2024 18:05:13 GMT;Max-Age=31104000;SameSite=None
pb_rtb_ev=3-1iad|8jz.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 10-Jan-2024 18:05:13 GMT;Max-Age=31536000;SameSite=None
INGRESSCOOKIE=efcc733d107cf951; path=/; HttpOnly; Secure; SameSite=None
location: https://sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=10&pid=59c9148628a0612da3689288&key=1Fhs7OXN968g&ev=1&us_privacy=1---&pid=562704
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 2215fbdc-d4bc-4933-ba33-44a3889ace11
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 349 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type ASCII text, with very long lines (468)
Hash b459cad92485814cfdbc666cdfe16706
16598ae488f9618859e1c2c2ddaaabab1d2c7e31
b3d6b510cf72f9894131adf189b1127e6fc37b18172e8a8092a13f5f255b68b4
GET /AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jan 2023 18:05:14 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373900786&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C5ffffc9e712b1564036ba7e2%2C5ff5868b4c1613054b3b5ee4%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373900786&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C5ffffc9e712b1564036ba7e2%2C5ff5868b4c1613054b3b5ee4%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247&nid=5f2063121d82c82557194737&ncid=6374ee512c8ca8606841c0a8&e=request&cb=1673373900786&asid=5ff48b20d0a41e5853490d69%2C5ff87336239c6c7fd600e1b5%2C5ff6ed8d06e9773265718a49%2C60215b2a3cfdb257402901c4%2C60215ad06fe78c75dd21c834%2C5ffffc9e712b1564036ba7e2%2C5ff5868b4c1613054b3b5ee4%2C619f58d1f078ac47ae2508f5%2C633ae81e14ba3a033d3a0fd6&ofpr=0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C0.49%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C%2C HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=; 2_C_200=OPTOUT
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:14 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
204 No Content 0 B URL HTTP/1.1 search.spotxchange.com/openrtb/2.3/dados/307068?src_sys=prebid
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /openrtb/2.3/dados/307068?src_sys=prebid HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 700
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: application/json
Connection: keep-alive
Set-Cookie: audience=551d45c6-9111-11ed-b141-141922060006; path=/; domain=.spotxchange.com; expires=Wed, 10-Jan-2024 18:05:14 GMT; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 064
X-SpotX-Timing-Page: 0.055422
X-SpotX-Timing-Page-Require: 0.000454
X-SpotX-Timing-Page-Context: 0.004541
X-SpotX-Timing-Page-URI: 0.000015
X-SpotX-Timing-Page-Mux: 0.000928
X-SpotX-Timing-Page-Cookie: 0.000034
X-SpotX-Timing-Page-Exception: 0.000001
X-SpotX-Timing-Page-Misc: 0.002872
X-SpotX-Timing-SpotMarket: 0.046247
X-SpotX-Timing-SpotMarket-Primary: 0.013239
X-SpotX-Timing-SpotMarket-Secondary: 0.033008
X-SpotX-Timing-Transform: 0.000330
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373900818&pKey=1706615864&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373900818&pKey=1706615864&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247
IP
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&zoneId=12920321&componentId=prebid&componentSubId=mustang×tamp=1673373900818&pKey=1706615864&schain=1.0%2C1!venatus.com%2C6357fcceb1abda701427d928%2C1%2C%2C%2C&loc=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&playerSize=440x247 HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://www.file.io
Access-Control-Allow-Credentials: true
x-sticky-vk: 1673373914614075-356
Expires: Tue, 10 Jan 2023 18:05:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=78a54f18f64d7e16b8ecd515cb52eb3; Domain=ads.stickyadstv.com; Expires=Thu, 09-Feb-2023 18:05:14 GMT; Path=/
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1700
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:14 GMT
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
hal900029.redintelligence.net/request_content.php?s=88707200194335004438336012200029&a=085a9ea4
200 OK 2.3 kB URL HTTP/1.1 hal900029.redintelligence.net/request_content.php?s=88707200194335004438336012200029&a=085a9ea4
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash c36434d660ad09573b721194735a5d92
c634e874e05f8232a1361a435e9b3d37124dc675
db06c7102f9513fd9866e3a89f7086bfda7dd44a2dd1a2aa2486a27f04555e41
GET /request_content.php?s=88707200194335004438336012200029&a=085a9ea4 HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:14 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 10 Jan 2023 18:05:14 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2282
Connection: close
Content-Type: text/html; charset=utf-8
optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
200 OK 28 B URL HTTP/2 optimized-by.rubiconproject.com/a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247
IP
Hash 3f48dd894e32b50dab267e0ae1dc072d
cdc8edb0a675e6a44fc294db45a7487f017a0d25
71a904ba726ae38a8aa08425bae824e9850452b5c41a182bdc526a139ba3a9bc
GET /a/api/vast.xml?account_id=13762&site_id=435928&zone_id=2583020&size_id=201&p_aso.video.protocols=2,5,3,6&p_aso.video.maxduration=30&p_aso.video.playbackmethod=3&p_aso.video.api=2&gdpr=1&gdpr_consent=&rp_schain=1.0,1!venatus.com,6357fcceb1abda701427d928,1,,,&width=440&height=247 HTTP/1.1
Host: optimized-by.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.file.io/
Origin: https://www.file.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:14 GMT
content-type: application/xml
content-length: 28
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
server: nginx/1.21.4
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
pragma: no-cache
set-cookie: khaos=LCQJMGAL-E-HY15; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqXnrtvkHEVzu9DtVM30fCgNnCcwqdpkjQmP2cJNMLA5frE8rE6QZLoM5lQcvoTvdzNpGeyS5O/ttAPlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Wed, 10-Jan-2024 18:05:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: e71df484-ed61-41d7-94da-01b0b4b248a6
Set-Cookie: uuid2=5366759499052406753; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
hal900023.redintelligence.net/request_content.php?s=56046000190250704438336012200023&a=1dcc42e4
200 OK 2.3 kB URL HTTP/1.1 hal900023.redintelligence.net/request_content.php?s=56046000190250704438336012200023&a=1dcc42e4
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash be771fd2213b650aaa2886d925c94582
1af3251d93851926f0a9a381adf82c685e2d062a
29985e36ae235e02f8edb91e81bb5f4f4ca9c241b91102a62a05473e392e1851
GET /request_content.php?s=56046000190250704438336012200023&a=1dcc42e4 HTTP/1.1
Host: hal900023.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7047a224d4c2df904bbce51d30d9cfb7.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:15 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 10 Jan 2023 18:05:15 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2281
Connection: close
Content-Type: text/html; charset=utf-8
simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 33 kB URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32403)
Hash d7ade76174beb2c98ffa5dac970b5137
b2b4ef45f88beb4f7b491fb82bb791782023fa6b
32700d084e4cba3953661148d5e1552a92da2e2f6f7cf051a252a4a905da3b9c
GET /AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e87a6a08d406cdea8f5e7a3d77687ebd
ff4aa0283b80b0a59b39d3d192957a3b8d64f153
a5597f1ee9e0b114a1b53606800680be1b12ed51f60416fc70ff00d870137e45
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 10 Jan 2023 18:05:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 09 Jan 2023 23:58:10 GMT
Expires: Tue, 10 Jan 2023 23:58:10 GMT
ETag: "ff4aa0283b80b0a59b39d3d192957a3b8d64f153"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 84d1fbfd-1a0d-426b-b8e6-c9e566747d8e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 8e917ab2-246d-4232-91ec-0254ee921ab3
Set-Cookie: uuid2=1705790241501910174; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
hal900029.redintelligence.net/viewability?s=88707200194335004438336012200029&a=48335432&vb=m
200 OK 0 B URL HTTP/1.1 hal900029.redintelligence.net/viewability?s=88707200194335004438336012200029&a=48335432&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=88707200194335004438336012200029&a=48335432&vb=m HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900029.redintelligence.net/request_content.php?s=88707200194335004438336012200029&a=085a9ea4
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:15 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
cdn.contentspread.net/24i/content/soberfb/EN/S-970x250.gif
200 OK 87 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-970x250.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 970 x 250\012- data
Hash 0e28e66e2adf8c90c21d5be5fb9e6fa6
1a0381040dccb97e0cbdd872d1a83b84356b9132
b597da368fd908257c568452ca805b3fb9023d6ad26b7675c5afc1fffb46fea9
GET /24i/content/soberfb/EN/S-970x250.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900029.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Jan 2023 18:05:15 GMT
Content-Type: image/gif
Content-Length: 86664
Last-Modified: Mon, 23 Jul 2018 15:20:13 GMT
Connection: close
ETag: "5b55f22d-15288"
Accept-Ranges: bytes
content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
206 Partial Content 33 kB URL HTTP/1.1 content1.avplayer.com/6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 3a114e21b29a025a4a958b94aadc2bbc
02a69b9c59279551a98dc78c2e5cf88a9a004aa7
f15c231da5e131d37448a58ee13d071373f2c3508e9d8f85073cc0e455eafe41
GET /6006a32f94a1ea4fe84a39a6/videos/613b7179622c8e2f551e12d3/613b717ef5faf534dc5eeaf4/video.mp4?AV_TAGID=6375faff2a6c5e689823d9b8&AV_TEMPID=62f50abcbb8a6411007d7629&cid=5f842b8d9602d668b013b55b&pid=5f2063121d82c82557194737&AV_PUBLISHERID=5f2063121d82c82557194737&av_qd1=636a37af05e5617b262a5a52&videoId=613b7179622c8e2f551e12d3 HTTP/1.1
Host: content1.avplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Tue, 10 Jan 2023 18:05:11 GMT
Connection: Keep-Alive
Content-Length: 3461456
Content-Range: bytes 0-3461455/3461456
Content-Type: video/mp4
Last-Modified: Fri, 17 Sep 2021 03:31:02 GMT
Accept-Ranges: bytes
X-GUploader-UploadID: ADPycdv4nlThQCwXXkjanig6bR-tW-grUuU7nT_eGe_KYYnlH7RlowXuCXvQIbpTIDS1pre0fty3jENsVgVYqtjasbZDtg
ETag: "1a477af42aad03e5a09ca1d553953c94"
x-goog-generation: 1631849462506067
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3461456
x-goog-hash: crc32c=XT+HgA==, md5=Gkd69CqtA+WgnKHVU5U8lA==
x-goog-storage-class: STANDARD
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, range
Server: UploadServer
X-HW: 1673373911.dop065.sk1.shc,1673373911.dop065.sk1.t,1673373911.cds260.sk1.c
Cache-Control: public, max-age=2592000
hal900023.redintelligence.net/viewability?s=56046000190250704438336012200023&a=e204dbba&vb=m
200 OK 0 B URL HTTP/1.1 hal900023.redintelligence.net/viewability?s=56046000190250704438336012200023&a=e204dbba&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=56046000190250704438336012200023&a=e204dbba&vb=m HTTP/1.1
Host: hal900023.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900023.redintelligence.net/request_content.php?s=56046000190250704438336012200023&a=1dcc42e4
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:15 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
www.file.io/page-data/about/page-data.json
200 OK 147 B URL HTTP/2 www.file.io/page-data/about/page-data.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cfb91ae7cd0473e276a9361907a683fc
755ce847d2d7b20c7d7663c791cc0ac7d109e138
d1517c2eb751a39f79cb9b6746ab739b672ae2100fd588097a6e27817db7fac2
GET /page-data/about/page-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896; _gat=1; _pbjs_userid_consent_data=3524755945110770; _ym_uid=16733738973816758; _ym_d=1673373897; _ym_isad=2; __gads=ID=677c95846a302c59:T=1673373912:S=ALNI_MYYldSlXhWFABl10Uv8LUfmTvZNeQ; __gpi=UID=00000ba0c5a10254:T=1673373912:RT=1673373912:S=ALNI_Mb-CI1Zx-4Zp2sdaAUdK_b2PMZh6g; _pubcid=80a40db3-dd52-43c1-b758-085bd090a367; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=3N-K9F9LZHNFTGdsVFVEUktQRzduYnR6QXo4UmFSTSUyQjA3bE1WbW80cE5DTVhPU1lxYnpPVG91Y3BMUE85bndudyUyQjVLb3lCOUE0dUZ1NzJwRVM1aUpSNElXd2ZZYzlSN3F2SHRvRTZqd3NoJTJCTkFJTSUzRA; cto_bidid=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 147
x-amz-id-2: 7QrABqrc6SjWQEOiOTmLRXZO4M0HNjNR14ugc33SGMThkAp6UEJ8i81Q1pdIqH1mrYwWcpsyM58=
x-amz-request-id: QK6XEBQRZ111Z9XH
last-modified: Wed, 23 Nov 2022 15:26:44 GMT
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
date: Tue, 10 Jan 2023 07:40:15 GMT
etag: "cfb91ae7cd0473e276a9361907a683fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AsPCGo5LIFBcEGGK6Vif6uauQGow5VXZ8JKQ8D4kRMJC3sVygDh1DA==
age: 37501
X-Firefox-Spdy: h2
www.file.io/page-data/plans/page-data.json
200 OK 141 B URL HTTP/2 www.file.io/page-data/plans/page-data.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1022652c2bef86b84cb16cd11c50b2ca
b6e08050640779887417782b5b4ed72b67417ee3
9ce5f47fb6595364ea9e3e39c26a32068095811aa5f761c095390abcbde493ed
GET /page-data/plans/page-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896; _gat=1; _pbjs_userid_consent_data=3524755945110770; _ym_uid=16733738973816758; _ym_d=1673373897; _ym_isad=2; __gads=ID=677c95846a302c59:T=1673373912:S=ALNI_MYYldSlXhWFABl10Uv8LUfmTvZNeQ; __gpi=UID=00000ba0c5a10254:T=1673373912:RT=1673373912:S=ALNI_Mb-CI1Zx-4Zp2sdaAUdK_b2PMZh6g; _pubcid=80a40db3-dd52-43c1-b758-085bd090a367; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=3N-K9F9LZHNFTGdsVFVEUktQRzduYnR6QXo4UmFSTSUyQjA3bE1WbW80cE5DTVhPU1lxYnpPVG91Y3BMUE85bndudyUyQjVLb3lCOUE0dUZ1NzJwRVM1aUpSNElXd2ZZYzlSN3F2SHRvRTZqd3NoJTJCTkFJTSUzRA; cto_bidid=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 141
x-amz-id-2: MRgTqxiTCyRwP/bYd6f6G++z2dN1j10iFupfJWgSWm649Qffrb0m7kI+fnDyr6/8Kp/kuqrnuPg=
x-amz-request-id: H0PZK2MFHP8RPGBA
date: Tue, 10 Jan 2023 11:14:35 GMT
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
etag: "1022652c2bef86b84cb16cd11c50b2ca"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oWvhTSOQpQjHyx5xkE3MSSUxufZCDagfmq2-UK4FPK4VtPaYbnIybg==
age: 24641
X-Firefox-Spdy: h2
www.file.io/page-data/index/page-data.json
200 OK 154 B URL HTTP/2 www.file.io/page-data/index/page-data.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 401beb30f0318595986e0b5ab983a5ad
20beaae498fe62667b1cb338cbcd8b74e1012135
3424a83f8f364423a1fa6e21a05aacc2a31993cc63e2880fe2a8fc0381fa4177
GET /page-data/index/page-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896; _gat=1; _pbjs_userid_consent_data=3524755945110770; _ym_uid=16733738973816758; _ym_d=1673373897; _ym_isad=2; __gads=ID=677c95846a302c59:T=1673373912:S=ALNI_MYYldSlXhWFABl10Uv8LUfmTvZNeQ; __gpi=UID=00000ba0c5a10254:T=1673373912:RT=1673373912:S=ALNI_Mb-CI1Zx-4Zp2sdaAUdK_b2PMZh6g; _pubcid=80a40db3-dd52-43c1-b758-085bd090a367; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=3N-K9F9LZHNFTGdsVFVEUktQRzduYnR6QXo4UmFSTSUyQjA3bE1WbW80cE5DTVhPU1lxYnpPVG91Y3BMUE85bndudyUyQjVLb3lCOUE0dUZ1NzJwRVM1aUpSNElXd2ZZYzlSN3F2SHRvRTZqd3NoJTJCTkFJTSUzRA; cto_bidid=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 154
x-amz-id-2: 8pibiGzyZgIBRnTfZpX59/dwWBjSk6CSy+QcNbMkfW8iniGB73SeMeB8aVBTWpdZF3+y8L6gnxI=
x-amz-request-id: TKBGR2SGNSCZ2713
date: Tue, 10 Jan 2023 05:19:45 GMT
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
etag: "401beb30f0318595986e0b5ab983a5ad"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VzFdMp56VmTfh8thaxisCPRzXC850R4kaGZ3S1Nf-V1vBQrj3a_7Gg==
age: 45931
X-Firefox-Spdy: h2
www.file.io/page-data/login/page-data.json
200 OK 135 B URL HTTP/2 www.file.io/page-data/login/page-data.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f561e1f747160f0e60849c13facafec
49e0da216427249eb4b187e75e026da6d62a4870
62242328d378c674e8a96cf868969dbcb45f278c5750be3981d7bdb2b5a00c68
GET /page-data/login/page-data.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896; _gat=1; _pbjs_userid_consent_data=3524755945110770; _ym_uid=16733738973816758; _ym_d=1673373897; _ym_isad=2; __gads=ID=677c95846a302c59:T=1673373912:S=ALNI_MYYldSlXhWFABl10Uv8LUfmTvZNeQ; __gpi=UID=00000ba0c5a10254:T=1673373912:RT=1673373912:S=ALNI_Mb-CI1Zx-4Zp2sdaAUdK_b2PMZh6g; _pubcid=80a40db3-dd52-43c1-b758-085bd090a367; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=3N-K9F9LZHNFTGdsVFVEUktQRzduYnR6QXo4UmFSTSUyQjA3bE1WbW80cE5DTVhPU1lxYnpPVG91Y3BMUE85bndudyUyQjVLb3lCOUE0dUZ1NzJwRVM1aUpSNElXd2ZZYzlSN3F2SHRvRTZqd3NoJTJCTkFJTSUzRA; cto_bidid=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 135
x-amz-id-2: 9lhHz6XW0yzlI3bmdchutJgiT/sxGGh+6BV6QHdcRNRsOUl0XQETN8aeBq2VwCZmscpGER09kLQ=
x-amz-request-id: VP8ZS8883V6YAKM4
date: Tue, 10 Jan 2023 03:16:43 GMT
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
etag: "4f561e1f747160f0e60849c13facafec"
accept-ranges: bytes
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WRvfpAY9SOCecvEIzFsy9cyizxdSsos06Knu0oJtXtDo7OY9LBSciQ==
age: 53313
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 349 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type ASCII text, with very long lines (468)
Hash b459cad92485814cfdbc666cdfe16706
16598ae488f9618859e1c2c2ddaaabab1d2c7e31
b3d6b510cf72f9894131adf189b1127e6fc37b18172e8a8092a13f5f255b68b4
GET /AdServer/SPug?o=1&p=159234&sc=1&u=7B8DDEDA-EAC3-497C-BE5A-0D9DC6A47F7B&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jan 2023 18:05:14 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
prebid-server.rubiconproject.com/openrtb2/auction
401 Unauthorized 56 B URL HTTP/2 prebid-server.rubiconproject.com/openrtb2/auction
IP
File type ASCII text, with no line terminators
Hash 18311bf17c516ca47e99844d9708e56b
0d532ac9b6efd39475e777ab01a3f1b5aeb68bc3
402f8b530328b874c270c29636a0de01eb91a33e6014035ebf459b86c3313e35
POST /openrtb2/auction HTTP/1.1
Host: prebid-server.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1822
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 401 Unauthorized
date: Tue, 10 Jan 2023 18:05:15 GMT
content-length: 56
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
x-prebid: pbs-java/1.106.0
content-encoding: gzip
X-Firefox-Spdy: h2
ad.360yield.com/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 920
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 10 Jan 2023 18:05:15 GMT
access-control-allow-origin: https://www.file.io
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1094
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: max-age=0, private, must-revalidate
date: Tue, 10 Jan 2023 18:05:15 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 143 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 839ba72d78b575c98304d491f087e096
150669745ae15c6820b40423e8ffe1d09a56ae51
70f0e9bfaa31102af602cf270233b093de9d6d750c7415ab16c8a021260b454f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 930
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 10 Jan 2023 18:05:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 143
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.file.io
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 6f8a0374-d30b-4a5f-8f10-0cfb6bbf78b3
Set-Cookie: icu=ChkInZeIARAKGAEgASgBMNzR9p0GOAFAAUgBENzR9p0GGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1836841104351579694; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2023 18:05:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
tlx.3lift.com/header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.17.0&referrer=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&tmax=3500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 710
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 30c1132bb23332d25aae664a092e80d5
b76f88ac7da79577bede106e5d6571910b22b169
9c9579671c3b273918ab8a6c25b4ca1b74d6acc7d602a117d9fd0f7aa5466701
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e25945002e3&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a7cbf1354ec7d7fe38cb6021cee6ef03
a275aef4a3cedb31c8a0d4d9f33a45e45643606a
2d61e048a0a6a99dce09634e934e2710d27f3e2d337927ef421f11c841baca9e
GET /bidRequest?dcn=8a9691f4017675f6edaa09248f6e02a0&pos=8a96956701777748ce2a4e2535a302e2&cmd=bid&eidcriteo.com=jnv8rF9VbVNpazZncXprS3VqRGEzYTYlMkZCbEJnUjJ5UEdqS2JWOGpWbjFKc3pkb1FlbTF5NTJxUEJBNWhNTXdwdW9hbHZqc0phRzR6dWpUMTAxaTV6VHRRNlJBJTNEJTNE&eidid5-sync.com=0&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.file.io
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1403
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.file.io
cache-control: no-cache, no-store, must-revalidate
date: Tue, 10 Jan 2023 18:05:15 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 28ba7291e3292afeff96bcf036abbd8f
cec26ae071b48e1285fd8bcb62e6d737ffd77fbf
11625294b5a957744b295e0dc4ff6e4872a0e611dc0d4e9906edfbd9f18f9bd2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 10 Jan 2023 18:05:16 GMT
Last-Modified: Tue, 10 Jan 2023 17:09:45 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EQCjGPrwvKFNa1569TRWJvjno-mDIKe_0HYIjDYlHcv6Sk3SGYg2wA==
Age: 3331
track.venatusmedia.com/dual/track_enc
200 OK 16 B URL HTTP/2 track.venatusmedia.com/dual/track_enc
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /dual/track_enc HTTP/1.1
Host: track.venatusmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2648
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-type: application/json
content-length: 16
vary: Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
X-Firefox-Spdy: h2
hal900023.redintelligence.net/viewability?s=56046000190250704438336012200023&a=e204dbba&vb=v
200 OK 0 B URL HTTP/1.1 hal900023.redintelligence.net/viewability?s=56046000190250704438336012200023&a=e204dbba&vb=v
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=56046000190250704438336012200023&a=e204dbba&vb=v HTTP/1.1
Host: hal900023.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900023.redintelligence.net/request_content.php?s=56046000190250704438336012200023&a=1dcc42e4
Cookie: 8lcfmzhxc8d6_uid=ddc2c3c3d69dffeb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 10 Jan 2023 18:05:16 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
track.venatusmedia.com/dual/track_enc
200 OK 16 B URL HTTP/2 track.venatusmedia.com/dual/track_enc
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /dual/track_enc HTTP/1.1
Host: track.venatusmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2732
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-type: application/json
content-length: 16
vary: Origin
access-control-allow-origin: https://www.file.io
access-control-allow-credentials: true
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track?d=Firefox&cou=NO&cos=Windows&r=www.file.io&rs=www.file.io&sid=82115&t=1673373912&cip=91.90.42.154&sn=&tgt=0&osv=10&bv=105.0&brn=Firefox&wi=440&he=247&app=&AV_PUBLISHERID=5f2063121d82c82557194737&test=&d64=4b94a8e013489fcbca102fb1e4a8a48e&d63=4b94a8e013489fcbca102fb1e4a8a48e&aafaid=&proto=https&uid=1673373912406-931371827337-006399-011-001390&cha=0.05&stagid=6374f8665f2f007d23421195&stplid=62f50abe103ae32adf5785c8&d35=&d36=6.2.71&cb=91266059704&d39=&d65=IntentIQ&d66=&apppkg=&cd20=6373750d98fb531abee85ae5&cd19=91.90.42.154&cd18=59.94520&cd17=10.75590&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=613b7179622c8e2f551e12d3&AV_WIDTH=440&AV_HEIGHT=247 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1307
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Cookie: aniC=; 2_C_200=OPTOUT
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:16 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feebfbbfd-68f7-4ded-a474-c951cdd7773f.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feebfbbfd-68f7-4ded-a474-c951cdd7773f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56ae748c9316a1db699c71c07f74eccd
42d2c5cffa7040decca69a3cab8ecc936acebc43
2b613914077dcdd5f520a26362f717d06e5756dc103aaa7924055e2cab823548
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feebfbbfd-68f7-4ded-a474-c951cdd7773f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7572
x-amzn-requestid: 195485a7-598e-483d-9c89-a23bcf33bdc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZ0X8HosIAMFTQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba3432-6984bf62713f6bd63fc8cdc8;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 03:10:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rttJ4c_pZrGzDdduW4GXN7_ijnd9V5j-yep38_6A-_jpnUZhYYJjlg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 05:00:19 GMT
age: 47097
etag: "42d2c5cffa7040decca69a3cab8ecc936acebc43"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.file.io%2F&domain=www.file.io&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:13 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.file.io
server-processing-duration-in-ticks: 1401296
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.file.io/framework-8fce40ee519418a713c9.js
200 OK 0 B URL HTTP/2 www.file.io/framework-8fce40ee519418a713c9.js
IP
GET /framework-8fce40ee519418a713c9.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: MOGgScAN0cGtS39aS2P+Mnpc7xNscVFJ4wzlDN9PnEpo9MU9jcq+EwlOj4gfIZIlPeJjJ1onTjhD0+UnIAwimQ==
x-amz-request-id: E5YBDK1PNVEFSGW7
date: Sun, 08 Jan 2023 01:18:30 GMT
last-modified: Wed, 23 Nov 2022 15:26:44 GMT
etag: W/"c4a5f7717ceee6ea81514ff62873ada9"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zcCDRBvDMls5nBBQdRo4j1sQ74dFa56K_QGnHvVgFfMtxDshoBjs8Q==
age: 233200
X-Firefox-Spdy: h2
www.file.io/webpack-runtime-e85adc3f73c70220e1cc.js
200 OK 0 B URL HTTP/2 www.file.io/webpack-runtime-e85adc3f73c70220e1cc.js
IP
GET /webpack-runtime-e85adc3f73c70220e1cc.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: 4jstbOo0t8fyCfrrK8ZjnWtVd7vYVx7KoOeXhOzahULTWj0NuMDxIuxH887FzRSxKeTgg8eQu2w=
x-amz-request-id: 8H22GD8HC73B1FT0
date: Thu, 05 Jan 2023 03:11:00 GMT
last-modified: Wed, 23 Nov 2022 15:26:47 GMT
etag: W/"a0b7944440774d5a3e8f33e901ae323f"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h-_kQsfnutFG8gaYeaVUzpd_PLju-bhBO0RYFy6dD7lS27VNEsQNBw==
age: 485650
X-Firefox-Spdy: h2
www.file.io/app-94ab6235bc4552ec45d3.js
200 OK 0 B URL HTTP/2 www.file.io/app-94ab6235bc4552ec45d3.js
IP
GET /app-94ab6235bc4552ec45d3.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: pIflAuFAl9+iCQqywFF+PSZ5rngD2n+Ag7dutf++VlgY6jdV9rXshAesjGSO2m2eb52x74mB0tI=
x-amz-request-id: WG8TC30PM7K3MQ7P
date: Sat, 03 Dec 2022 01:04:30 GMT
last-modified: Wed, 23 Nov 2022 15:26:39 GMT
etag: W/"d5b96f90610fd0e66fccb62435e7f262"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jYvE8COe3p_k-N67ejoIfaHNNRaA2A75xlIbtyx0QjF70l9c7dAVEw==
age: 3344439
X-Firefox-Spdy: h2
www.file.io/page-data/sq/d/1810866655.json
200 OK 0 B URL HTTP/2 www.file.io/page-data/sq/d/1810866655.json
IP
GET /page-data/sq/d/1810866655.json HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
x-amz-id-2: 0vsaPHkviSxFWaw+DhyAZVKxE+pq2z3jyGzXVz6qV6AsD/SH+tUAvt5w3BxgOkfGORz1uaZbvIk=
x-amz-request-id: 17XR5W4P417DHSG7
last-modified: Wed, 23 Nov 2022 15:26:45 GMT
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
content-encoding: br
date: Tue, 10 Jan 2023 01:40:08 GMT
etag: W/"7bb0144e136507cd9bfbaceb72189d09"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iLgSo8nkjRO12RAeTJgxKyZj1SNRm4d-4zLGDN6mHomDv64HublngA==
age: 59102
X-Firefox-Spdy: h2
www.file.io/deleted
200 OK 0 B IP
GET /deleted HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
x-amz-id-2: mn45CL8mrwIwe8s2ddRCvs6QOtwXcUip2lVQ/7sD+d3K+Vg4vzgSzhmNQ7N0OKJFj15MOgNDPf3KdGdZLV63VQ==
x-amz-request-id: ZTRXM4F8PE1BC3WZ
last-modified: Wed, 23 Nov 2022 15:26:43 GMT
server: AmazonS3
cache-control: public, max-age=0, s-maxage=86400
content-encoding: gzip
date: Tue, 10 Jan 2023 02:48:19 GMT
etag: W/"dcd54f24d9946be4664b61b5de3eb6f9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1uCP-YJEqKre5xgDbtv7W10y2Olpqq5scPKicKkqJBrk-Og4VtryfA==
age: 55011
X-Firefox-Spdy: h2
www.file.io/d6a9949e-4e9c210da2d83a376ddb.js
200 OK 0 B URL HTTP/2 www.file.io/d6a9949e-4e9c210da2d83a376ddb.js
IP
GET /d6a9949e-4e9c210da2d83a376ddb.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: v5REDSDIVSrhgImA/z6tyKukPXTJalFiPWbfJuFJyaHXdlZmNy/0TXyW7d4I+lzivbtuUoo3ndg=
x-amz-request-id: AJ19VKYME2G66BA4
date: Fri, 02 Dec 2022 00:47:27 GMT
last-modified: Wed, 23 Nov 2022 15:26:43 GMT
etag: W/"2feda6389a53a29ad5102ef7918752f6"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: frT7izEMDDSzt4GNB4-CGiL9gfg39Q8MVU3Sc-PXK_SaUxAK5ndUtQ==
age: 3431863
X-Firefox-Spdy: h2
hb.vntsm.com/v3/live/ad-manager.min.js
200 OK 0 B URL HTTP/2 hb.vntsm.com/v3/live/ad-manager.min.js
IP
ASN #34989 ServeTheWorld AS
GET /v3/live/ad-manager.min.js HTTP/1.1
Host: hb.vntsm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 10 Jan 2023 18:05:09 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 131999
cdn-uid: 5d6cd18c-1b61-4922-947b-91a6b9ea7b00
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: cdn-requestcountrycode,Content-Type,x-bl,ref_url
access-control-expose-headers: x-geo-subdivision,X-Geo,cdn-requestcountrycode,Content-Type,x-bl
access-control-allow-methods: GET, OPTIONS
cache-control: public, max-age=86400
etag: W/"535f1c109cb4e576b821c84c122b0f21"
last-modified: Tue, 03 Jan 2023 11:49:47 GMT
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 01/04/2023 15:36:31
cdn-edgestorageid: 830
x-bl: 0
cdn-status: 200
cdn-requestid: 449ddff7d8e2b9eee03c5ff688cc994b
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D200%26key%3D%5BRX_UUID%5D
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D200%26key%3D%5BRX_UUID%5D
IP
GET /usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1673373912406-931371827337-006399-011-001390%26biddername%3D200%26key%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 10 Jan 2023 18:05:12 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://sync.aniview.com/cookiesyncendpoint?auid=1673373912406-931371827337-006399-011-001390&biddername=200&key=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
www.file.io/cb1608f2-e216539eabbd5925fc79.js
200 OK 0 B URL HTTP/2 www.file.io/cb1608f2-e216539eabbd5925fc79.js
IP
GET /cb1608f2-e216539eabbd5925fc79.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: aVcaOeDoX5t3N5ixnHetwDOeBqpUwn66A8+8hv/2nCizm3olW9loULnuUezliYx/GZsZ6DHA8PI=
x-amz-request-id: 0WT7MFXJ3R79JXE7
date: Thu, 05 Jan 2023 03:18:57 GMT
last-modified: Wed, 23 Nov 2022 15:26:40 GMT
etag: W/"67e460d9dbcf3a954ab115654390d3d7"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yTB0yL5kShGxJclbujVVMQgkvlA1j7JdWGefJhvgNvZryU4lctnzOQ==
age: 485173
X-Firefox-Spdy: h2
www.file.io/component---src-pages-deleted-js-5722fd90ebe96ef888eb.js
200 OK 0 B URL HTTP/2 www.file.io/component---src-pages-deleted-js-5722fd90ebe96ef888eb.js
IP
GET /component---src-pages-deleted-js-5722fd90ebe96ef888eb.js HTTP/1.1
Host: www.file.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.file.io/deleted/
Cookie: _ga=GA1.2.257132352.1673373896; _gid=GA1.2.1313194209.1673373896
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: Xqnai12en11O+DGLDX44vmc76ujFfv2yZ+aG0dE60Zkva5V0zlKnqUzHuoqsLkc0YfI/VWB614JzSectLgHuhA==
x-amz-request-id: GRARCN5HPY365XN2
date: Sat, 07 Jan 2023 04:07:13 GMT
last-modified: Wed, 23 Nov 2022 15:26:41 GMT
etag: W/"3546f418175eba4bde29ef79090a1c6c"
server: AmazonS3
cache-control: public, max-age=31536000
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y89E7Wk7nMM0CVbtQ1OnIFsehPDP7F2T0mw7BrU6Ov7E-GNnhd69tw==
age: 309477
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90916604?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/90916604?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/90916604?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.file.io
Connection: keep-alive
Referer: https://www.file.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/90916604/1?wmode=7&page-url=https%3A%2F%2Fwww.file.io%2Fdeleted%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22isFromApi%22%3A%22yesIsFromApi%22%7D%7D&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A1043%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A827111623651%3Ahid%3A732960338%3Az%3A0%3Ai%3A20230110180457%3Aet%3A1673373897%3Ac%3A1%3Arn%3A318711366%3Arqn%3A1%3Au%3A16733738973816758%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A33%2C441%2C60%2C2%2C320%2C0%2C%2C166%2C3%2C1601%2C1601%2C0%2C1086%3Aco%3A0%3Ans%3A1673373894693%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673373897%3At%3ADeleted%20%7C%20file.io&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 10 Jan 2023 18:05:11 GMT
access-control-allow-origin: https://www.file.io
set-cookie: yabs-sid=523303051673373911; Path=/; SameSite=None; Secure
i=DIrynKnzfjVV/KDW5XKV6TIlbZcDLB3y6AMqRDarHNiz4hN3xdeXMx6ot1cT2n2QTSYZSNMDPMmlX3mVK9Buoki5CqQ=; Expires=Fri, 07-Jan-2033 18:05:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=385758021673373911; Expires=Wed, 10-Jan-2024 18:05:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=385758021673373911; Expires=Wed, 10-Jan-2024 18:05:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1704909911.yc.1673373911#1704909911.yrts.1673373911#1704909911.yrtsi.1673373911; Expires=Wed, 10-Jan-2024 18:05:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 10-Jan-2023 18:05:11 GMT
last-modified: Tue, 10-Jan-2023 18:05:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
34.197.10.85
72.251.249.14
2.21.206.244
23.38.201.105
54.93.140.99
135.125.134.215
52.31.12.122
93.158.134.119
213.19.147.43
104.18.20.226