unlimited.forumvi.com/http:/unlimited.forumvi.com/f7-forum%27%3E
301 Moved Permanently 178 B URL HTTP/1.1 unlimited.forumvi.com/http:/unlimited.forumvi.com/f7-forum%27%3E
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /http:/unlimited.forumvi.com/f7-forum%27%3E HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Dec 2022 01:14:21 GMT
Content-Length: 178
Location: http://unlimited.forumvi.com/http:/unlimited.forumvi.com/f7-forum'-
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5132
Expires: Sat, 03 Dec 2022 02:39:53 GMT
Date: Sat, 03 Dec 2022 01:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3734
Cache-Control: max-age=123548
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:21 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:33:29 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11365
Expires: Sat, 03 Dec 2022 04:23:46 GMT
Date: Sat, 03 Dec 2022 01:14:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 00:18:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3368
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GjotAA7S1dHRTUDaafF9I9jdoVWn7U3RCMDxxPRsOnx/lsevutUglkRWbhjAbxFUjvFNmHwQNI4=
x-amz-request-id: Q6TJ0ZSVZ0RJV2K7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 00:46:20 GMT
age: 1681
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
unlimited.forumvi.com/http:/unlimited.forumvi.com/f7-forum'-
301 Moved Permanently 178 B URL HTTP/1.1 unlimited.forumvi.com/http:/unlimited.forumvi.com/f7-forum'-
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /http:/unlimited.forumvi.com/f7-forum'- HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Dec 2022 01:14:21 GMT
Content-Length: 178
Location: http://unlimited.forumvi.com/http-/unlimited.forumvi.com/f7-forum'-
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
unlimited.forumvi.com/http-/unlimited.forumvi.com/f7-forum'-
404 Not Found 1.2 kB URL HTTP/1.1 unlimited.forumvi.com/http-/unlimited.forumvi.com/f7-forum'-
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6e3b83bb9fc345fd1ad5cdde5d187e48
4f89a4cff710fa66e3f19d71f472c752b62e442f
874227d02dff7a6ac8c8d8e67bc9947d5085184a67290069d3dcaec06b1381b5
GET /http-/unlimited.forumvi.com/f7-forum'- HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Sat, 03 Dec 2022 01:14:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
ETag: W/"5db7f6f0-1044"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash 736c275c54be13ef1e2b11a9fd4e4c0d
18dc4b5e5ca5ec981234064bd766f10dc2683102
5c627653fd8d14084950784e3b3feee3ba0c53f5caca449f20c0cbdfd23d6173
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=111520
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:22 GMT
Etag: "6389b38e-118"
Expires: Sun, 04 Dec 2022 08:13:02 GMT
Last-Modified: Fri, 02 Dec 2022 08:13:02 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f76daa7b86d9131e6d216129d7c7afb
340450e17150a4dcc2ac1b98d8f4e8c683aff662
6824efd917249e90d796f5fd4fd3603c884eea4daed8207d404f580aa6003203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 765
Cache-Control: max-age=102921
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:22 GMT
Etag: "63898efa-117"
Expires: Sun, 04 Dec 2022 05:49:43 GMT
Last-Modified: Fri, 02 Dec 2022 05:36:58 GMT
Server: ECS (amb/6B8F)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f76daa7b86d9131e6d216129d7c7afb
340450e17150a4dcc2ac1b98d8f4e8c683aff662
6824efd917249e90d796f5fd4fd3603c884eea4daed8207d404f580aa6003203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 765
Cache-Control: max-age=102921
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:22 GMT
Etag: "63898efa-117"
Expires: Sun, 04 Dec 2022 05:49:43 GMT
Last-Modified: Fri, 02 Dec 2022 05:36:58 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 01:11:16 GMT
cache-control: public,max-age=3600
age: 186
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
redcdn.net/frmste/images/slide-forum-creation.png
200 OK 33 kB URL HTTP/2 redcdn.net/frmste/images/slide-forum-creation.png
IP
File type PNG image data, 555 x 404, 8-bit colormap, non-interlaced\012- data
Hash dd8d1dd734ed03a56768296ccf8ce70a
be5d9684d9f40ff27a11ff09025cec913d371340
2f32a13a4863df29055beb4a78341abc32cbd139f9e4c6511d4b91c3f4941a9f
GET /frmste/images/slide-forum-creation.png HTTP/1.1
Host: redcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:22 GMT
content-type: image/png
content-length: 33152
last-modified: Mon, 14 Nov 2022 09:51:54 GMT
etag: "63720fba-8180"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y0q59X9aSa97JOG1L2D2n9eMHLkA4r0TfjbfXpJaeXX57Duf4PfKBJD0h2QVKG9bcUmlb6vEJllxdJDYYRrIfNzpBBKzHW3RCv7inmyd7NIORgOcuHACd5Rc4UX8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773871f11d2d0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 736c275c54be13ef1e2b11a9fd4e4c0d
18dc4b5e5ca5ec981234064bd766f10dc2683102
5c627653fd8d14084950784e3b3feee3ba0c53f5caca449f20c0cbdfd23d6173
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=111520
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:22 GMT
Etag: "6389b38e-118"
Expires: Sun, 04 Dec 2022 08:13:02 GMT
Last-Modified: Fri, 02 Dec 2022 08:13:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3739
Cache-Control: max-age=118491
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:22 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:09:13 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c4bIcbiCsyumdaIFlxDJ0g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5qzsekoNH5B/Lgem+laSRVEEhFk=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Sat, 03 Dec 2022 02:41:12 GMT
Date: Sat, 03 Dec 2022 01:14:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Sat, 03 Dec 2022 02:41:12 GMT
Date: Sat, 03 Dec 2022 01:14:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Sat, 03 Dec 2022 02:41:12 GMT
Date: Sat, 03 Dec 2022 01:14:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5141
Expires: Sat, 03 Dec 2022 02:40:05 GMT
Date: Sat, 03 Dec 2022 01:14:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Sat, 03 Dec 2022 02:41:12 GMT
Date: Sat, 03 Dec 2022 01:14:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e69659e6409f9caf1fe9cc67c9627353
d316d825169d60dde81a3ee522dd004dfa97fa91
88caacec3bbb78e83905b25b489aff9ae71cfed94835503c601daa15f8248d9c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6420910e-ce43-46a0-89dc-4495fcc90ae3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9527
x-amzn-requestid: 8bbc4492-b1b2-4aae-a09e-1d2c4453e642
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsg9GuBoAMFm2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6384279f-02732aee2d0807af5674481f;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:14:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dcKCmoJ72hMyef0pkKs84CIP5iqMRNoeJXGugNVfUyNeMQMTfOEoBw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:55:02 GMT
age: 1162
etag: "d316d825169d60dde81a3ee522dd004dfa97fa91"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 71649
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 249aec334460c66dc88b9e8def4e48df
f86d1d278ba5b24587b10519b1b30d75044efd97
b083151804ced0533a5b33302ef110b50ddc4bf653de0fb8f6c7711f4bc29fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9449
x-amzn-requestid: c21c52f9-d971-46d9-b632-0439a0e23da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZkxHKbIAMFxkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fb7-2b8cc0982af568626f4a4bbf;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: h_QxhlhIxUS0VSjt1z50xNf0u1eB6c1WPTJUfvwGQA-t4M0zmXo2AA==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:03:42 GMT
etag: "f86d1d278ba5b24587b10519b1b30d75044efd97"
content-type: image/jpeg
age: 11442
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:54 GMT
age: 12990
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7c90eda6b69179422ecd1245e94162c
d5e0aef84626250a62cc94a781a47e08aaac3f6a
5fd1c9586a82c9e6a9a8b5d99b746f17e9485f80057ec35c3f8d5ab5256fbb16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8273
x-amzn-requestid: 6abe0e18-1b39-4a87-8f15-6ea75d99b658
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZosHLDIAMFyoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fd1-455200672a96e0f5605a339f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ioHzlpBY23kgiXqulSrUfZ5srlNyQIqGQQ5nvSzCJWkx35fGrIJPZA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:40 GMT
age: 12164
etag: "d5e0aef84626250a62cc94a781a47e08aaac3f6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fcb89ca25035b2bbb71ae5dd175fcd40
544428cdad754b1bb7be3cd46a79bf078fd5b450
36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:46:23 GMT
age: 77281
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
unlimited.forumvi.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Dec 2022 01:14:27 GMT
Content-Length: 0
Location: https://unlimited.forumvi.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e476c7f51632b2ae08c6ec199977342
609e442852e675cdbad89c6f10718d09e1acf66c
ac33d2438deb8c72f4ea11caef4a6b851b79a72faab429719223133a7d8cf491
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC33D2438DEB8C72F4EA11CAEF4A6B851B79A72FAAB429719223133A7D8CF491"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21104
Expires: Sat, 03 Dec 2022 07:06:11 GMT
Date: Sat, 03 Dec 2022 01:14:27 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f76daa7b86d9131e6d216129d7c7afb
340450e17150a4dcc2ac1b98d8f4e8c683aff662
6824efd917249e90d796f5fd4fd3603c884eea4daed8207d404f580aa6003203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 770
Cache-Control: max-age=102921
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Etag: "63898efa-117"
Expires: Sun, 04 Dec 2022 05:49:48 GMT
Last-Modified: Fri, 02 Dec 2022 05:36:58 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f76daa7b86d9131e6d216129d7c7afb
340450e17150a4dcc2ac1b98d8f4e8c683aff662
6824efd917249e90d796f5fd4fd3603c884eea4daed8207d404f580aa6003203
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 770
Cache-Control: max-age=102921
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Etag: "63898efa-117"
Expires: Sun, 04 Dec 2022 05:49:48 GMT
Last-Modified: Fri, 02 Dec 2022 05:36:58 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 6f9297992c93d57f34f0df4d4f155e91
5d966cf8ad68c7ae5c79e2fcc9564c4928eb3241
5f40fd8717edf97e2adbda0e24be63abb3e6c7b84c8dcc1be1e4035872d9eaff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5362
Cache-Control: max-age=109698
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Etag: "63899783-116"
Expires: Sun, 04 Dec 2022 07:42:45 GMT
Last-Modified: Fri, 02 Dec 2022 06:13:23 GMT
Server: ECS (amb/6B8F)
X-Cache: HIT
Content-Length: 278
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 13:01:47 GMT
expires: Wed, 29 Nov 2023 13:01:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 303160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 8bb256dfc9bfde1880ebd8030a02cabc
ae5d312abddf2531da3f7df9cf723b2d65e08a7b
8eec27810521985839989534603072b6cb9d9a99967267139f789973d373134f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3669
Cache-Control: max-age=163800
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Etag: "638a7176-139"
Expires: Sun, 04 Dec 2022 22:44:27 GMT
Last-Modified: Fri, 02 Dec 2022 21:43:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash 2895d02f7f7d7d6455be69dcb1bff64d
910b4296d1a6f8201f517b496fe921d074cb556a
3c8c3d0501d4860ffba677557e8041d9d66988c1efb93baeeb68abd4c946ada1
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 01:14:27 GMT
expires: Sat, 03 Dec 2022 01:14:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43576
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83ce33d0b8ce3197cb1031af8b3401bc
8fcc92f24739ab6f755807b0f0b19b42892a2828
6c68cf36b716dbeacdfffb63b7da52fd6851509c3152f0d3e49e4c8e87481e70
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 727 B IP
Hash 82a80e012b9302c5d633866df95b4aa6
f3fe8e169850bab13e0f733368d268571b3ddb33
89558def505df5b0cee409b3fd71890bb09cb50d2cd3d2bc4c22dc83c2014e18
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2263
Cache-Control: max-age=146540
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "638a3389-2d7"
Expires: Sun, 04 Dec 2022 17:56:48 GMT
Last-Modified: Fri, 02 Dec 2022 17:19:05 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 279 B IP
Hash 1a9779b9a979e86049918a522a29c9d4
e1cb0d34edd498d900a1731d79cbc1ce2b751882
85ae4803e3b0fe65499206b6bdbc2f5c6df72a1ebc9f14e514bed075383cceb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4372
Cache-Control: max-age=165940
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "638a7714-117"
Expires: Sun, 04 Dec 2022 23:20:08 GMT
Last-Modified: Fri, 02 Dec 2022 22:07:16 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
vandonstar.googlecode.com/files/VDS_qtan_v6.js
404 Not Found 1.6 kB URL HTTP/2 vandonstar.googlecode.com/files/VDS_qtan_v6.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash e731499e3971a66c96e7ff73d4675016
2a57fcaaf2d00592a61fdf543bc1de1b251fba2a
3ca5cc045d53da2bed275f6143cd1ac74335b3622e034fae1afd8fe3ee916181
GET /files/VDS_qtan_v6.js HTTP/1.1
Host: vandonstar.googlecode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1581
date: Sat, 03 Dec 2022 01:14:28 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 401035
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ALlFH5tXhDOCNQqMv6C8psKjpIRewnZlc5oTYUKjQvD44mYZmDBg9OLlf8bSD1TEVww4rsXwCXRhMTTfNa3I80mDaRPsvBU3c8PuEioNtT7LC9gdYiAJXUW3ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77387215295ddd47-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 5.1 kB URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
Hash 503845bb8c63d0d60e4da0b0797c1491
693bb78619e7fd25f4cce569759c83e3966e508a
9fd40caa985c5a404679324eb55ef2ac01d639631fa5286e15221a2b997fdc28
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Mon, 02 Jan 2023 01:14:28 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 7B1C:D2D3:4824A8:4A013B:638A8635
vary: Accept-Encoding
x-fastly-request-id: 13302c302e4dcbfe7e16260e2cd5983d6eec8ece
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1a9779b9a979e86049918a522a29c9d4
e1cb0d34edd498d900a1731d79cbc1ce2b751882
85ae4803e3b0fe65499206b6bdbc2f5c6df72a1ebc9f14e514bed075383cceb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4033
Cache-Control: max-age=165601
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "638a7714-117"
Expires: Sun, 04 Dec 2022 23:14:29 GMT
Last-Modified: Fri, 02 Dec 2022 22:07:16 GMT
Server: ECS (amb/6B8F)
X-Cache: HIT
Content-Length: 279
i.servimg.com/u/f49/16/29/88/81/list_s10.png
200 OK 803 B URL HTTP/2 i.servimg.com/u/f49/16/29/88/81/list_s10.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0afee1ce905834246788a63c2344e7cc
348b98a9b63e837b83e4e369e0ba932dddb67309
1142d6673b086861bbf3c4bc6fd089fefb5773753c6a4e12d5c13c1454f75584
GET /u/f49/16/29/88/81/list_s10.png HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/png
content-length: 803
last-modified: Tue, 04 Nov 2014 12:23:25 GMT
etag: "5458c53d-323"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 02 Dec 2023 16:44:41 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZVXtgi9wOkrFSJW2otem8TR0p1S3mq3fTDI9iYORYiRia6VrSTFXorT%2BeoBiXcycl%2FAGNCW%2BoVWdVmHQT7wCQnFf1snByWwHn4xtw0rvqE%2FT7FvQYZSlCfZI8Hgo0BlM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77387214cb740b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f49/16/29/88/81/add10.png
200 OK 3.3 kB URL HTTP/2 i.servimg.com/u/f49/16/29/88/81/add10.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 9de29877f186bd4bdff446b683ed38dc
b3ff3ef85e8533c1d46477cc3346a75cc2409144
6c9eb770235e9b3993b73e06b493f17f534cd1cf26a008926f29aaed416b51e0
GET /u/f49/16/29/88/81/add10.png HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/png
content-length: 3275
last-modified: Tue, 04 Nov 2014 12:41:28 GMT
etag: "5458c978-ccb"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 02 Dec 2023 07:33:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Em03mRyiDPhaFHdIA8PEvFuoQpXohrxeLr89Fnthan4hrhqGrqUnPOzIcX1fElabSqALJ46az%2Fv1dgKXbPiAMtkLL5jcRVrZMqhBlceH3aSFYHVb6lJ7NC1YMMMQVqQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77387214cb760b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f48/13/58/60/43/loadin10.gif
200 OK 728 B URL HTTP/2 i.servimg.com/u/f48/13/58/60/43/loadin10.gif
IP
File type GIF image data, version 89a, 235 x 12\012- data
Hash 122b8d121636b6af333002c3b068b060
2eee529559e96aca8fbbd22cd22569f1610626dd
f8f25d608de5ab3f62f91dcaf36e2a9ff344d6bdfe52165e483893cc4b3fc658
GET /u/f48/13/58/60/43/loadin10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/gif
content-length: 728
last-modified: Sun, 31 Jul 2011 06:28:40 GMT
etag: "4e34f618-2d8"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 02 Dec 2023 07:33:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0rhgoZ5J9aRw9V82drDtsTh4qtcFvr0q1G76%2F8BJbRDELSN9Ei9Um%2BPz%2F9pv%2B%2Bqt3Ub8UUBLXyYU3TevqAMFT5eGpo5Wv9n%2FiDlaQFh7Rb%2BSvWubKaaiaarN5vr%2BkWkF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77387214cb770b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6f9297992c93d57f34f0df4d4f155e91
5d966cf8ad68c7ae5c79e2fcc9564c4928eb3241
5f40fd8717edf97e2adbda0e24be63abb3e6c7b84c8dcc1be1e4035872d9eaff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5363
Cache-Control: max-age=109698
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "63899783-116"
Expires: Sun, 04 Dec 2022 07:42:46 GMT
Last-Modified: Fri, 02 Dec 2022 06:13:23 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
i.servimg.com/u/f49/16/29/88/81/list_e10.png
200 OK 3.4 kB URL HTTP/2 i.servimg.com/u/f49/16/29/88/81/list_e10.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 9fbea00ab3f2a2dace722ae7509019f8
eedb57a86a24da7e7895b5e74c96a89d892b41f6
9147ce41bd946d549eac6bb512f8e8d4acbe46462db24da1403aa91f0deae163
GET /u/f49/16/29/88/81/list_e10.png HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/png
content-length: 3416
last-modified: Tue, 04 Nov 2014 12:15:33 GMT
etag: "5458c365-d58"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 25 Apr 2023 09:10:51 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o%2BiHXNIhHcz%2BJaFyn4JWBZpoi1kpCAz2R9Yw%2B15OUr3%2ByBgy%2BZalL%2B36eZVSdKn4RN8GaQyCHwHVCQa6ZGqKRFevKle6EKtiHzH7xrPi%2F2Y8VqIQrFokpoo%2BqX2T13wo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77387214cb750b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unlimited.forumvi.com/
200 OK 67 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8976)
Hash 300bd90f536218f81b3dcedb1d420712
50d3a3f10abb742482882760c3e552b34ac2d075
8a8021377bddbc0e7f0afde3a172f43a1ae0a6c793eb594b8a9928591314853d
GET / HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:27 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Sat, 03 Dec 2022 00:00:00 GMT
last-modified: Sat, 03 Dec 2022 01:14:27 GMT
vary: User-Agent
set-cookie: exadd=167004; expires=Sat, 03-Dec-2022 05:14:27 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 1d01c48aceb0aa610a1769d1398e403d
7c5e8e14bc685af339a979ceef6c2942994bd86e
925a72d059b45264690446d0e004cf1a96d4be10dbf614ad51113af07e82404a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3747
Cache-Control: max-age=125689
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "6389dc4a-139"
Expires: Sun, 04 Dec 2022 12:09:17 GMT
Last-Modified: Fri, 02 Dec 2022 11:06:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
static.criteo.net/js/ld/publishertag.js
200 OK 42 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
Hash 3bfb5b4221b79a7ddd671fcb698a76e3
69f73a4ca1ca0f733fc07bc801ac09b39b9f9b29
273da4898b0351ca3c0b9058c750e56811daaaa961eb14a571d835755d60309f
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Sun, 04 Dec 2022 01:14:28 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
unlimited.forumvi.com/serviceworker.js
200 OK 2.6 kB URL HTTP/2 unlimited.forumvi.com/serviceworker.js
IP
Hash 98eb1fd10ac617c5ebecc7e92b325fee
786bda0bb9086f0409c0811326868922a7bd0744
0f60c158c8249f1b0eac9afc57c9fc6b2fbe8997e5813571ee1832382b15d907
GET /serviceworker.js HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: exadd=167004; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/javascript
last-modified: Thu, 25 Feb 2021 14:30:57 GMT
etag: W/"6037b4a1-b0d"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 3c22e279d291dace2ffebfccdd4a59e9
fdbf29ff763b23ac646caa428d77367685d7cfa0
1869d3b43e88dfc33ed3b02aeda7b116c6d5c82e7486de9b752ec912ebdb946b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: max-age=149383
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "638a3934-139"
Expires: Sun, 04 Dec 2022 18:44:11 GMT
Last-Modified: Fri, 02 Dec 2022 17:43:16 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0d777fa1fa7f20756be68639f40c8ea
f69cf5289f67226c3c76b3ac0438ae12089b1a7c
d8e6bbb67fa25a6487cd2cf767976e7771977be00831800667f68587bb9b8733
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8E6BBB67FA25A6487CD2CF767976E7771977BE00831800667F68587BB9B8733"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2219
Expires: Sat, 03 Dec 2022 01:51:27 GMT
Date: Sat, 03 Dec 2022 01:14:28 GMT
Connection: keep-alive
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=5vNYSl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmNnNTdCUyRk1GUyUyQnR6UEI3RVpRYXgzYQ; expires=Thu, 28 Dec 2023 01:14:28 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 281116
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 28567
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 16:53:51 GMT
cache-control: public, max-age=604800
etag: "072eaf64a771815874455704fca9301b"
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9pzBISJshOBl6rsr3AF_QZtNvzow5Hwt5GQzRJQxmoXTwanRQ2Qh8w==
age: 202837
X-Firefox-Spdy: h2
static.criteo.net/images/pixel.gif?ch=2
200 OK 43 B URL HTTP/2 static.criteo.net/images/pixel.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /images/pixel.gif?ch=2 HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 09 Dec 2008 16:52:36 GMT
etag: "493ea254-2b"
expires: Tue, 28 Nov 2023 01:14:28 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/images/pixel.gif?ch=1
200 OK 43 B URL HTTP/2 static.criteo.net/images/pixel.gif?ch=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /images/pixel.gif?ch=1 HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 09 Dec 2008 16:52:36 GMT
etag: "493ea254-2b"
expires: Tue, 28 Nov 2023 01:14:28 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 00:41:08 GMT
expires: Sat, 03 Dec 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 2000
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 561fc9500f286cbed4b8a40a7e3f4fda
b61aee5d87b48ce838250940a0d417665090f8a3
f644f090f9d1d513e2d555451081e72ada3b8c3507d9d7a950ff42de3dc3520c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3724
Cache-Control: max-age=121711
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "6389ccd7-139"
Expires: Sun, 04 Dec 2022 11:02:59 GMT
Last-Modified: Fri, 02 Dec 2022 10:00:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 561fc9500f286cbed4b8a40a7e3f4fda
b61aee5d87b48ce838250940a0d417665090f8a3
f644f090f9d1d513e2d555451081e72ada3b8c3507d9d7a950ff42de3dc3520c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3747
Cache-Control: max-age=121734
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "6389ccd7-139"
Expires: Sun, 04 Dec 2022 11:03:22 GMT
Last-Modified: Fri, 02 Dec 2022 10:00:55 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=unlimited.forumvi.com&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=unlimited.forumvi.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash 6285506d2ec40bb6ecdf2c57964da9d8
88ba4e64f5872d5f2d7ecf89ef7b351653c4f8b3
3538cf42fa5f9c8298ee58e0580d7732afc1462df9a195ee52854f1d660cc320
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=unlimited.forumvi.com&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: da25f6b642b899e6a66edcb887716101
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?ptv=132&profileId=206&cb=80044755171
200 OK 224 B URL HTTP/2 bidder.criteo.com/cdb?ptv=132&profileId=206&cb=80044755171
IP
File type JSON data\012- , ASCII text, with very long lines (442), with no line terminators
Hash 587e9f2171080202be341cd3c2d16372
3e4bc9a2e1b78fc4b81221eeb8bdecb0f1c2f26a
3e60aae175b0f40415a2f41e9924e33913a964dc976cc0815e59b022c6fb7433
POST /cdb?ptv=132&profileId=206&cb=80044755171 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 756
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://unlimited.forumvi.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 224
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
unlimited.forumvi.com/?utm_source=pwa
200 OK 13 kB URL HTTP/2 unlimited.forumvi.com/?utm_source=pwa
IP
Hash d26b0c34e5d3e3076e45b7639bfd1fd6
be3a9f58bf9351652e993b4991343de2fd03cb13
0ac6b6b2f26f436c8a932c99d66f10dd8b66e788d6caa9983a7dc9472230942d
GET /?utm_source=pwa HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/serviceworker.js
Connection: keep-alive
Cookie: exadd=167004; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Sat, 03 Dec 2022 00:00:00 GMT
last-modified: Sat, 03 Dec 2022 01:14:28 GMT
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/forforumotion-vi/loader.js
200 OK 23 kB URL HTTP/2 cdn.taboola.com/libtrc/forforumotion-vi/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65503)
Hash d35edc1737c980020e3ffd0324db4c64
5af94c84b248ccb329838bcdc310305d71d13a59
c9ba666f7312112a06baf5c42b34e9f748ee63d1b160943bc956fee090ee54da
GET /libtrc/forforumotion-vi/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: a1O/5Z1iN9irOud8iLySfxtSJ0F5n9REOCF2vaX9foI95wP36HIzEYWM0xmA/7FMzqmQ4y3bYDw=
x-amz-request-id: MKNR1WAPSK9FVPM5
last-modified: Thu, 01 Dec 2022 18:17:07 GMT
etag: "4edf5a9a253a3feecde585dbee4cb644"
x-amz-version-id: rsyXPmnj.VMYyaB3hJu2SXn525UUSjnb
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670030069.675895,VS0,VE198
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 99
content-length: 22888
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c86a53c98cf36317d462dbf92365f83f
64dd4a203b1bbc4e268f2ef7aac40312387fa542
72e6900b7647fbb94f8a3de503bf14c8eddcb1433ffd442de98500e284431778
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=113307
Date: Sat, 03 Dec 2022 01:14:28 GMT
Etag: "6389af50-1d7"
Expires: Sun, 04 Dec 2022 08:42:55 GMT
Last-Modified: Fri, 02 Dec 2022 07:54:56 GMT
Server: ECS (dcb/7EEC)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hi04yFje2aSWc4f21pOUhGPq3DWCmSJ4OavPLvJXyoFOlszcEgtc7A==
Age: 2879
api.viglink.com/api/ping
200 OK 260 B IP
File type ASCII text, with no line terminators
Hash 9c375897dd6b3d1842278981b3387d9c
8c17453d7a2cd724699c7d85fc159f92f70c2510
1877cb43aa80367cfd3670b1acf65b635fe7989b2c4df2ffd40d0b8337eaf5cd
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 130
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://unlimited.forumvi.com
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 03 Dec 2022 01:14:28 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 260
Connection: keep-alive
illiweb.com/rs3/66/frm/jquery/cookie/jquery.cookie.js
200 OK 147 kB URL HTTP/2 illiweb.com/rs3/66/frm/jquery/cookie/jquery.cookie.js
IP
File type ASCII text, with very long lines (1011), with no line terminators
Size 147 kB (147170 bytes)
Hash 2bc9dae8c21ab60e06a954e7dce89a80
395be4d46298057f9d73474e92b8a88ab6437512
aa12141656a95b031ca8e890a37c979a8c1664b9df3231e83d405fac0c3e7ce2
GET /rs3/66/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:27 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:22:23 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 834724
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ew%2Bf73Tvdqm5FB7Dhhy%2BY%2B1I%2B1CPzpjx733O%2BHctbfFYH5KxHzyJNHoWXBbqIDRI1EEEVlsEG5d%2Funqgxsd8DpgIRfciGddCEbqMPD1%2BCI1XRMxaaWdqwqlWdGBmLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773872147cf5b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Content-Type: application/json
Origin: https://unlimited.forumvi.com
Content-Length: 379
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: d8b4fdbee3521bf3e85bdbbdad72654d
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Content-Type: application/json
Origin: https://unlimited.forumvi.com
Content-Length: 459
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 654ad5f51ae7dfd673fcb087578ec88a
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fbd16ed380b6c658b17110d3a9bb2839
75eac87847b31afbc248840f4481586a52a31beb
0f4e898e0807ba3f2056c7015f528e3c7b20f4acdb07cfab823f4cd133abfa9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F4E898E0807BA3F2056C7015F528E3C7B20F4ACDB07CFAB823F4CD133ABFA9F"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3373
Expires: Sat, 03 Dec 2022 02:10:42 GMT
Date: Sat, 03 Dec 2022 01:14:29 GMT
Connection: keep-alive
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.313&type=info&msg=https%3A%2F%2Funlimited.forumvi.com%2F&llvl=2&id=6134&cv=20221201-24-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.313&type=info&msg=https%3A%2F%2Funlimited.forumvi.com%2F&llvl=2&id=6134&cv=20221201-24-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.313&type=info&msg=https%3A%2F%2Funlimited.forumvi.com%2F&llvl=2&id=6134&cv=20221201-24-RELEASE<=deflated&pct=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.369&type=usage&msg=rtus&llvl=2&id=641&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.369&type=usage&msg=rtus&llvl=2&id=641&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.369&type=usage&msg=rtus&llvl=2&id=641&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.296&type=usage&msg=rtus&llvl=2&id=2675&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.296&type=usage&msg=rtus&llvl=2&id=2675&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.296&type=usage&msg=rtus&llvl=2&id=2675&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.314&type=usage&msg=rtus&llvl=2&id=6031&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.314&type=usage&msg=rtus&llvl=2&id=6031&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.314&type=usage&msg=rtus&llvl=2&id=6031&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.viglink.com/api/sync.gif?key=9019de09e2fbd24ca1be00a9fededd9e
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.gif?key=9019de09e2fbd24ca1be00a9fededd9e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.gif?key=9019de09e2fbd24ca1be00a9fededd9e HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Sat, 03 Dec 2022 01:14:28 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
gum.criteo.com/sid/json?origin=publishertag&domain=forumvi.com&sn=FirefoxSyncframe&so=0&topUrl=unlimited.forumvi.com&info=MklRZl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlekNNeVBYVk5Dd1dKVlRJT1ZJNDB4&idsd=-221353450,-758237258&cw=1&lsw=1
200 OK 317 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=forumvi.com&sn=FirefoxSyncframe&so=0&topUrl=unlimited.forumvi.com&info=MklRZl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlekNNeVBYVk5Dd1dKVlRJT1ZJNDB4&idsd=-221353450,-758237258&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (383), with no line terminators
Hash 2985e53843f95656923b44b49520ae56
8c7eedc29e22fa17f7d90da8918883e5e79d1e5e
452f566d2cb9cd9903663198c5309aee412fcd1c6f0e24af76dc54e97e2d02af
GET /sid/json?origin=publishertag&domain=forumvi.com&sn=FirefoxSyncframe&so=0&topUrl=unlimited.forumvi.com&info=MklRZl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlekNNeVBYVk5Dd1dKVlRJT1ZJNDB4&idsd=-221353450,-758237258&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1027506
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.325&type=info&msg=300x250%20Thumbnails-7%20thumbnails-300x250&llvl=2&id=598&cv=20221201-24-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.325&type=info&msg=300x250%20Thumbnails-7%20thumbnails-300x250&llvl=2&id=598&cv=20221201-24-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.325&type=info&msg=300x250%20Thumbnails-7%20thumbnails-300x250&llvl=2&id=598&cv=20221201-24-RELEASE<=deflated&pct=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.viglink.com/api/sync.js?key=9019de09e2fbd24ca1be00a9fededd9e
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.js?key=9019de09e2fbd24ca1be00a9fededd9e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.js?key=9019de09e2fbd24ca1be00a9fededd9e HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Sat, 03 Dec 2022 01:14:29 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 08ca0238100c906a665f21b1caa97f47
3f605891faeafb51a36cecd25d331bcc450d34e9
35dac74d71c723f7a8e7585174fad51a0115e4a294a2c0d80b63026e25825618
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.347&type=usage&msg=rtus&llvl=2&id=4425&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.347&type=usage&msg=rtus&llvl=2&id=4425&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.347&type=usage&msg=rtus&llvl=2&id=4425&cv=20221201-24-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 23363
access-control-allow-credentials: true
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&gjid=99234272&_gid=515142312.1670030067&_u=YEBAAUAAAAAAACAAI~&z=826532306
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&gjid=99234272&_gid=515142312.1670030067&_u=YEBAAUAAAAAAACAAI~&z=826532306
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&gjid=99234272&_gid=515142312.1670030067&_u=YEBAAUAAAAAAACAAI~&z=826532306 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://unlimited.forumvi.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 03 Dec 2022 01:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 101f1f8046077922204cfc91ce1a4532
796c97e1882d108f33a18a60d9ccbae7bc84855c
f88284ce216a9afd8a002f3ad3c03405ad2848c28ef06a9f82dd7fce6f29e76a
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 231
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://unlimited.forumvi.com
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 03 Dec 2022 01:14:28 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 370
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 01:14:28 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://unlimited.forumvi.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash ae362dcfc36c65824b06b3a446b76018
80f0c3404430a097f1c013ca2691d93db7da3dc9
23af03564e7b0e00f5136a553591440f4dfe606515e0c8929f6f895f89e22273
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1149
Cache-Control: max-age=113019
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:29 GMT
Etag: "6389b4f3-116"
Expires: Sun, 04 Dec 2022 08:38:08 GMT
Last-Modified: Fri, 02 Dec 2022 08:18:59 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
200 OK 10 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (17842)
Hash 9e43c5e528240cdf834597c4c2602e99
32a0ee31fad0bb4e51f05ea2d1a9cd9c1ea23315
13c4324eb2fe11e448a5c79a993af81d93705a3b8e0e173de82d85ccd587ad87
GET /syncframe?origin=rtus&topUrl=unlimited.forumvi.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=eb5b352f-cfd4-47ec-b534-57ff0760e6b8; expires=Thu, 28 Dec 2023 01:14:29 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 664970
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 14 kB IP
Hash ed38ccd1047935f654f0d559f10e7304
67b3d09a58008e17f53a5b2285e30d3403873ca2
f72c316d2d1c0f24eb04658f9c421b980f709dcd1cc8e5ca6d4e834cca86c66c
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=MklRZl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlekNNeVBYVk5Dd1dKVlRJT1ZJNDB4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo; expires=Thu, 28 Dec 2023 01:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 559979
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 414 B IP
Hash 2fb1dce80d0b8db85fac7413e6733b48
49a4bc6375fc6619a77618cfc614d334aaf35222
e9e3eb2593c5a23529a191cba1c717768116b2ef24b3d942268817b450c7f50c
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=Z_hYwF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlTGlQYjJqSlFPNUpXSGJtNFlzQXVw; expires=Thu, 28 Dec 2023 01:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 288933
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 542 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash fb622f26463f7d944c57704eb97c6623
fb4397c2ae88d57b0b29a9a627aa6025e04ef4af
28556607f7ac58819228ec15ac103108d501edd0395cc17d6c20fbe5e7f48a5b
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 93329
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067640&fromUser=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&toUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&fromSD=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.640&id=2289&llvl=2&cv=20221201-24-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067640&fromUser=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&toUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&fromSD=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.640&id=2289&llvl=2&cv=20221201-24-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067640&fromUser=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&toUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&fromSD=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.640&id=2289&llvl=2&cv=20221201-24-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.562529,VS0,VE90
x-vcl-time-ms: 90
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
IP
Hash 964e856d57835f091cc2f5e7258aee1d
d37d7bf0bd8745abd74cacaaaa16bc5b963c8e93
3626587e126ad5fd356a01b7c0bbdd34ab80ef2e1f18c3b8c3f55d442e39132b
GET /syncframe?origin=rtus&topUrl=unlimited.forumvi.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=425b1d2f-10c0-4136-815f-304c5425358a; expires=Thu, 28 Dec 2023 01:14:28 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 370595
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 30 kB URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 9ea443724f5e82ecf89ef6511e260f5e
052e86be48db092c53098c5843160283d35f7518
bccc9c35985d20228991a30a31b2f48721bb01f136e6f99cbbd9a6d83ff06106
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 131994
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 18 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d65956373330adfff967b1119b1fdc6b
b405b23c9d2bbc8103d11a3df6288c8b20baf2a8
d3d8a70f219412c2e81bccd27b39ae9d99dd1efc7656578bcdb72f92417e0abf
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 612492
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&_u=YEBAAUAAAAAAACAAI~&z=401761550
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&_u=YEBAAUAAAAAAACAAI~&z=401761550
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1383158272.1670030067&jid=1342958323&_u=YEBAAUAAAAAAACAAI~&z=401761550 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 03 Dec 2022 01:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 5.3 kB IP
File type ASCII text, with very long lines (12966), with no line terminators
Hash 353a4850cbf196051dc81c7dcc868346
8299c5063d2f0ca8f72be5e4cb70c1d292cbbfd4
09a79b738c75487066cf79311cce5f26d088b14de410f409067963ebf6aa52f8
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Qg28xwkcLAThJ8s%2FD5z2PpayuS7MQwJzZVDXQud8MutmyBTGInEC7N65AXasWiGMsm4uRQNlWuVALrigJykQ%2FYZijBy7R2Re9%2Be0wJVpdH8gGJfh4W2kE2dYk1aow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7738721eaf91b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Content-Type: application/json
Origin: https://unlimited.forumvi.com
Content-Length: 736
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 241c303c63cc9904a8ec211dde670393
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=cac93675d4026ff3eb0ed35ca3cc93f0&sd=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067804&fromUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&toUser=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&fromSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.804&id=6917&llvl=2&cv=20221201-24-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=cac93675d4026ff3eb0ed35ca3cc93f0&sd=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067804&fromUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&toUser=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&fromSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.804&id=6917&llvl=2&cv=20221201-24-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/3/fix-user-id?lti=deflated&ri=cac93675d4026ff3eb0ed35ca3cc93f0&sd=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&time=1670030067804&fromUser=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&toUser=5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875&fromSD=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&toSD=v2_c3b510c998320e17b908df4b67e38c42_5877b808-49c9-43ed-97c2-8c90721c37ce-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&tim=01%3A14%3A27.804&id=6917&llvl=2&cv=20221201-24-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.717356,VS0,VE88
x-vcl-time-ms: 88
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/trc/3/json?tim=01%3A14%3A27.327<i=deflated&data=%7B%22id%22%3A770%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A300%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A250%2C%22dw%22%3A300%2C%22dh%22%3A250%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-300x250%3Aabp%3D0%22%2C%22uip%22%3A%22300x250%20Thumbnails-7%22%2C%22orig_uip%22%3A%22300x250%20Thumbnails-7%22%2C%22cd%22%3A0%2C%22mw%22%3A300%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C300x250%20Thumbnails-7%3Dthumbnails-300x250%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 12 kB URL HTTP/2 trc.taboola.com/forforumotion-vi/trc/3/json?tim=01%3A14%3A27.327<i=deflated&data=%7B%22id%22%3A770%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A300%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A250%2C%22dw%22%3A300%2C%22dh%22%3A250%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-300x250%3Aabp%3D0%22%2C%22uip%22%3A%22300x250%20Thumbnails-7%22%2C%22orig_uip%22%3A%22300x250%20Thumbnails-7%22%2C%22cd%22%3A0%2C%22mw%22%3A300%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C300x250%20Thumbnails-7%3Dthumbnails-300x250%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
Hash f5959ee68ce52f9e2fdb37346dbba52d
6a651b8f7f617121dc0b8a605d1865a84e74f6c2
b308c23376d7630d91170aec1cafb63de961408f29ecc8edce3385b7709dfce8
GET /forforumotion-vi/trc/3/json?tim=01%3A14%3A27.327<i=deflated&data=%7B%22id%22%3A770%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A300%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A250%2C%22dw%22%3A300%2C%22dh%22%3A250%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-300x250%3Aabp%3D0%22%2C%22uip%22%3A%22300x250%20Thumbnails-7%22%2C%22orig_uip%22%3A%22300x250%20Thumbnails-7%22%2C%22cd%22%3A0%2C%22mw%22%3A300%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C300x250%20Thumbnails-7%3Dthumbnails-300x250%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030069.253680,VS0,VE150
vary: Accept-Encoding
x-vcl-time-ms: 150
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash aac1042207afd54e1cf1befcaf3420cd
00f0597866330a850a1d6222861591f24dd18380
ea77ece8880eb28ffe83e94ef787b4204f8b1b3d09f443011b898b13ed4bb706
GET /lite-unit/3.9.8/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:02:09 GMT
etag: "1842444d4bb92087143326a4d508875d"
server: AmazonS3
via: 1.1 b34d5d8e5954d0b7b46d5f0eb534c166.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: iVxUQ_yUDgKIDSZaR21P2jFvv94ZUaTAMQdnd9xsEMFJTpsmb2NMlg==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
age: 929512
x-served-by: cache-bma1655-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 31858
x-timer: S1670030070.842818,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29909
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://unlimited.forumvi.com
server-processing-duration-in-ticks: 616429
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 34a6e01086616219680f16eed3737ad9
3cf3c687f443c35333b447b00c7ead84bdbc23cf
1f57aef3e44612c507607d48e746df4e859bad2a4f059389d6c7f68385cfaaf9
GET /syncframe?origin=rtus&topUrl=unlimited.forumvi.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=39d1c9df-366a-427b-83ce-ae0e460cb853; expires=Thu, 28 Dec 2023 01:14:28 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 605881
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.591&type=info&msg=Start%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=9464&cv=20221201-24-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.591&type=info&msg=Start%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=9464&cv=20221201-24-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.591&type=info&msg=Start%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=9464&cv=20221201-24-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 76708
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.594&type=info&msg=Finish%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=8799&cv=20221201-24-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forforumotion-vi/log/2/debug?tim=01%3A14%3A27.594&type=info&msg=Finish%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=8799&cv=20221201-24-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/2/debug?tim=01%3A14%3A27.594&type=info&msg=Finish%20Rendering%20300x250%20Thumbnails-7&llvl=2&id=8799&cv=20221201-24-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
x-fastly-to-nlb-rtt: 76708
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2a3e9c9270d5d1402700343b567d8e21
4348655937347ff19881acafd04b1277e017f19c
905ee9517e8597ac86e76b99b970f77a4fbb2500de30ef6efea97a4bbcea51d4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 01:14:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 13:33:18 GMT
Expires: Fri, 09 Dec 2022 13:33:17 GMT
Etag: "4348655937347ff19881acafd04b1277e017f19c"
Cache-Control: max-age=562127,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773872200c620b4d-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 893
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 03 Dec 2022 01:14:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://unlimited.forumvi.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dnacdn.net/dna
200 OK 9.3 kB IP
Hash 1191866342d72becf7392af9ff00eaae
32b9496a08fa26eeb8c1106a4eff2f7d8c82ff45
d09b3a0016ad33f0c6d97965630c78569886f9c5b2c4e6af7fee60f835288e35
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=Z_hYwF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlTGlQYjJqSlFPNUpXSGJtNFlzQXVw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=x_-Vxl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlWCUyQndUTGVqZUQlMkZYZjVKVTNZVFRPWg; expires=Thu, 28 Dec 2023 01:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 305689
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/trc/3/json?tim=01%3A14%3A27.352<i=deflated&data=%7B%22id%22%3A920%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A728%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A90%2C%22dw%22%3A728%2C%22dh%22%3A90%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A0%2C%22mw%22%3A728%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 3.3 kB URL HTTP/2 trc.taboola.com/forforumotion-vi/trc/3/json?tim=01%3A14%3A27.352<i=deflated&data=%7B%22id%22%3A920%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A728%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A90%2C%22dw%22%3A728%2C%22dh%22%3A90%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A0%2C%22mw%22%3A728%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
File type Unicode text, UTF-8 text, with very long lines (6151), with no line terminators
Hash f2187ff68a23651ca4a94b2f759b7241
bbd143cd9c9b8893afaff86d6b031a60804a355a
abcee79bb761352999a0bb8dae45f2ef650a2623cc40aa59babeb50de577e675
GET /forforumotion-vi/trc/3/json?tim=01%3A14%3A27.352<i=deflated&data=%7B%22id%22%3A920%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669918620280%2C%22vi%22%3A1670030067323%2C%22cv%22%3A%2220221201-24-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22plf%22%3A%7B%22ack_exm%22%3Atrue%7D%2C%22bu%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22e%22%3A%22https%3A%2F%2Funlimited.forumvi.com%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A728%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A90%2C%22dw%22%3A728%2C%22dh%22%3A90%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A0%2C%22mw%22%3A728%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030069.273588,VS0,VE146
vary: Accept-Encoding
x-vcl-time-ms: 146
X-Firefox-Spdy: h2
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=31589837&cb=1670030068258&uv=3245&tms=1670030068258&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670030066941!ts:1670030068258&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=31589837&cb=1670030068258&uv=3245&tms=1670030068258&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670030066941!ts:1670030068258&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=31589837&cb=1670030068258&uv=3245&tms=1670030068258&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670030066941!ts:1670030068258&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-length: 0
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.409
200 OK 37 kB URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.409
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b3251848a2abfe9a2eeafca1bdf95ee0
528172fdd018bba5d625373546d81ee726e06fca
1c89af3505b8bb23153db97960072df9a5d91eaeecbbe7566ccbde1ea418e709
GET /pfe/current/universal.min.js?v=3.1.409 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 15:42:46 GMT
etag: W/"6388cb76-18c6c"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 8.8 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- C source, ASCII text, with very long lines (29481)
Hash 900229d7bcea46a719b074250d69e9cd
a90d69e76316c60558db7736a28fda4bec3e9868
92aa564bd40e0399072e2fdd9dc1c1cb907e15c0b293d74a76e1dd7d535db7fa
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 105570
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=5974485&noaop=5&sortOrderType=0&cb=1670030068272&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=708768617&tz=0&viewable=true&ddast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vD!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
200 OK 8.8 kB URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=5974485&noaop=5&sortOrderType=0&cb=1670030068272&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=708768617&tz=0&viewable=true&ddast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vD!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
IP
Hash b1948364acd8fa54441c3b9fb426fecf
1903df1294cb4b8e4a3a99cbbea9a17cbfd01b36
ea7b4c8cb087dddc8b0584868a1ae31a8a69670504550c8d1dda149e161d9eb5
POST /VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=5974485&noaop=5&sortOrderType=0&cb=1670030068272&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=708768617&tz=0&viewable=true&ddast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vD!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 117
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1474
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.234378,VS0,VE88
vary: Accept-Encoding
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=undefined&cb=1670030068311&uv=3245&tms=1670030068311&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=c97baab7-cda2-445e-8968-35fb8dc5c783&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 128 kB URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=undefined&cb=1670030068311&uv=3245&tms=1670030068311&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=c97baab7-cda2-445e-8968-35fb8dc5c783&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
Size 128 kB (128339 bytes)
Hash dbd48beb39c01a6bb7e6ab758768cbc0
15e525fcecc1e29c07f482c34c84c6db4922f0f4
90aa0e1b2cb3047baad9ddda1f2f2606174c0fc4907a2db9f7f35aae5573cec7
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=undefined&cb=1670030068311&uv=3245&tms=1670030068311&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=c97baab7-cda2-445e-8968-35fb8dc5c783&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.248852,VS0,VE25
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/log/3/explore?route=AM:IL:V&tvi2=-2<i=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&li=rbox-t2m<=deflated&tim=01%3A14%3A28.406&id=3785&llvl=2&cv=20221201-24-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/explore?route=AM:IL:V&tvi2=-2<i=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&li=rbox-t2m<=deflated&tim=01%3A14%3A28.406&id=3785&llvl=2&cv=20221201-24-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forforumotion-vi/log/3/explore?route=AM:IL:V&tvi2=-2<i=deflated&ri=21a39373bd0e00ff161f8b9260e7f26a&sd=v2_333a32fee7010a5fb4fad3dc86b3deb8_0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=0e8edd88-a063-43e9-99f3-7e939a1f9952-tucta842875&pi=/&wi=715028154153314806&pt=text&vi=1670030067323&li=rbox-t2m<=deflated&tim=01%3A14%3A28.406&id=3785&llvl=2&cv=20221201-24-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.320268,VS0,VE84
x-vcl-time-ms: 84
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=4660541&noaop=5&sortOrderType=0&cb=1670030068315&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-440653544&tz=0&viewable=true&ddast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
200 OK 988 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=4660541&noaop=5&sortOrderType=0&cb=1670030068315&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-440653544&tz=0&viewable=true&ddast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
IP
Hash 638c8ae0e6e355e6817e21c93b10bd82
8704e2846bd1f79aa15c20170d76f9e39f18965a
61cdd1f9c30ec4720d4f015b01db14ab8116e525ffb12c214d7ba152a1eaa76e
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=4660541&noaop=5&sortOrderType=0&cb=1670030068315&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-440653544&tz=0&viewable=true&ddast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1404
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.277613,VS0,VE86
vary: Accept-Encoding
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash eaa62ec471b7a69a3c84a2ed4c148b7f
9c9a80c2a4e6ca976c18d2beefba1a0a5e977a64
a39b7ca367162adb5b52d9f2b1da37ad9881d0557e84188803ffdc7b2af9aa9f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3776
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:30 GMT
Last-Modified: Sat, 03 Dec 2022 00:11:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash eaa62ec471b7a69a3c84a2ed4c148b7f
9c9a80c2a4e6ca976c18d2beefba1a0a5e977a64
a39b7ca367162adb5b52d9f2b1da37ad9881d0557e84188803ffdc7b2af9aa9f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3776
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:30 GMT
Last-Modified: Sat, 03 Dec 2022 00:11:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash eaa62ec471b7a69a3c84a2ed4c148b7f
9c9a80c2a4e6ca976c18d2beefba1a0a5e977a64
a39b7ca367162adb5b52d9f2b1da37ad9881d0557e84188803ffdc7b2af9aa9f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3776
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:30 GMT
Last-Modified: Sat, 03 Dec 2022 00:11:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash eaa62ec471b7a69a3c84a2ed4c148b7f
9c9a80c2a4e6ca976c18d2beefba1a0a5e977a64
a39b7ca367162adb5b52d9f2b1da37ad9881d0557e84188803ffdc7b2af9aa9f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3776
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 01:14:30 GMT
Last-Modified: Sat, 03 Dec 2022 00:11:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:30 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d6b6ea81-72a7-11ed-8d17-153cf9b00506; expires=Sat, 31-Dec-2022 01:14:30 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d6b6eaf4-72a7-11ed-8d17-153cf9b00506
X-fe: 122
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
trc.taboola.com/forforumotion-vi/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=1
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forforumotion-vi/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=1 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1701
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030071.526342,VS0,VE86
x-vcl-time-ms: 86
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
200 OK 87 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash dcfe04133edaa84ac4a7356299134bf2
600265d1e188692d5cb0b9dbc828c708181bd3d8
1f50ba3994c74af69746c8db181597b9e74d7bb53c808ce9f7014facf0c59bfd
GET /vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DH4gCSpZOjdiQ2RHNdcZaQ1gWcI8EDnhtXKaFZT4JUmiFDacp53eylqcVHaDpMgh56JBtwAdvTI=
x-amz-request-id: M2DJX9S4FNAQPE8Z
last-modified: Thu, 27 Oct 2022 07:34:53 GMT
etag: "dcfe04133edaa84ac4a7356299134bf2"
x-amz-meta-ctime: 1666856092
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1666856080
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
age: 581948
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 164777
x-timer: S1670030071.679828,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 87152
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
age: 6110
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 201
x-timer: S1670030071.849242,VS0,VE0
cache-control: private,max-age=31536000
abp: 17
content-length: 254
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Content-Type: application/json
Origin: https://unlimited.forumvi.com
Content-Length: 387
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: e70db6024bbe65bf0f05d218525380d5
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e74254b3fdce7d6b84a71a7aff43789
65c8b4abf957f9b54d99d0f78559e639adb29efb
f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GBhAilKMKo9RvIzqzF9V4jTZbvpa2rPZeoy6Jy8fMc1-JO078OAYzQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 11:13:09 GMT
age: 50481
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=31579697&cb=1670030069071&uv=3245&tms=1670030069071&su=&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm_vA&ft=1&unm=WIDGET_ITEM&
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=31579697&cb=1670030069071&uv=3245&tms=1670030069071&su=&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm_vA&ft=1&unm=WIDGET_ITEM&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=8015557&crid=4660541&dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&cmcv=&pix=31579697&cb=1670030069071&uv=3245&tms=1670030069071&su=&abt=amplean_vC!eidc_vA!mprdctdt6_vA!smbs!ufm_vA&ft=1&unm=WIDGET_ITEM& HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-length: 0
X-Firefox-Spdy: h2
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:31 GMT
age: 85047
x-served-by: cache-bma1655-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 29632
x-timer: S1670030071.025513,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=1
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forforumotion-vi/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=1 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1727
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:31 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030071.990079,VS0,VE90
x-vcl-time-ms: 90
X-Firefox-Spdy: h2
trc.taboola.com/forforumotion-vi/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated
204 No Content 0 B URL HTTP/2 trc.taboola.com/forforumotion-vi/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forforumotion-vi/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2406
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:31 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030071.997275,VS0,VE87
x-vcl-time-ms: 87
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d7078ce8-72a7-11ed-92a3-191344880506; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d7078d4d-72a7-11ed-92a3-191344880506
X-fe: 128
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d707622d-72a7-11ed-b44d-1342c0320506; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d7076273-72a7-11ed-b44d-1342c0320506
X-fe: 90
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d70789bc-72a7-11ed-abbe-1586fee60206; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d7078a1b-72a7-11ed-abbe-1586fee60206
X-fe: 44
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d707863d-72a7-11ed-a553-1f0541440206; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d707867d-72a7-11ed-a553-1f0541440206
X-fe: 121
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d707b2cd-72a7-11ed-ad12-11e121d60506; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d707b328-72a7-11ed-ad12-11e121d60506
X-fe: 8
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d6b6eaf4-72a7-11ed-8d17-153cf9b00506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d6b6eaf4-72a7-11ed-8d17-153cf9b00506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=d6b6eaf4-72a7-11ed-8d17-153cf9b00506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 03 Dec 2022 01:14:31 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=d708d9db-72a7-11ed-b027-18a305860506; expires=Sat, 31-Dec-2022 01:14:31 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 58
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
illiweb.com/rs3/13/frm/jquery/jqmodal/jqmodal.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/13/frm/jquery/jqmodal/jqmodal.js
IP
GET /rs3/13/frm/jquery/jqmodal/jqmodal.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/x-javascript
last-modified: Tue, 27 Aug 2019 14:00:13 GMT
expires: Sun, 03 Dec 2023 01:14:28 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEDjOqj%2BBDUzmponIZ97rEHvQs4EcC5IEg98whEjc4A1yC6AE9xPlqLjTlbCpnU92QzyS1s9bdOxzRruTfaVVL1JtrjtmNLmVbZcPWwm4wIu130Wq0Dx%2FS26E%2F8EKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773872146ceeb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=4660481&noaop=5&sortOrderType=0&cb=1670030068292&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-679966993&tz=0&viewable=true&ddast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=4660481&noaop=5&sortOrderType=0&cb=1670030068292&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-679966993&tz=0&viewable=true&ddast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=300&height=168&pubid=169497&tagid=953497&crid=4660481&noaop=5&sortOrderType=0&cb=1670030068292&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-679966993&tz=0&viewable=true&ddast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=1&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=1089131&dpubid=189227&abtst=mprdctdt6_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Funlimited.forumvi.com&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 117
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1434
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.258623,VS0,VE103
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1113824
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/?rb=nGrUBZmkTp_y6XTUNFtG3Jw8ykbYSPXyepSTTA-WZt0FG9NYgVXKsS1hWchEj080_Fg59Z5w0oXwq5nBDewwiUqOvab6ZqI1Twc_RPW9NCDxnkiHOkOLpgad0yNrfDK-G57dXEFUe4C2z_k4-8rN8OeEJfyCmAmXn7YnLbEuNKfIXLd39QNTPVHM154YXFi6XGj8hjbY0wE94u_N-Rf9B5VNhXM7YoDAnyDMS14bBJmJx7uYw5y7g5cYnj4%3D&request_ab2=96002&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Funlimited.forumvi.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=324c5f66-eedb-44ac-a9a1-081c8883fba7&userId=512aecb7576042ed8ade244ba798c869&m=link
200 OK 0 B URL HTTP/2 cdn.betgorebysson.club/?rb=nGrUBZmkTp_y6XTUNFtG3Jw8ykbYSPXyepSTTA-WZt0FG9NYgVXKsS1hWchEj080_Fg59Z5w0oXwq5nBDewwiUqOvab6ZqI1Twc_RPW9NCDxnkiHOkOLpgad0yNrfDK-G57dXEFUe4C2z_k4-8rN8OeEJfyCmAmXn7YnLbEuNKfIXLd39QNTPVHM154YXFi6XGj8hjbY0wE94u_N-Rf9B5VNhXM7YoDAnyDMS14bBJmJx7uYw5y7g5cYnj4%3D&request_ab2=96002&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Funlimited.forumvi.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=324c5f66-eedb-44ac-a9a1-081c8883fba7&userId=512aecb7576042ed8ade244ba798c869&m=link
IP
GET /?rb=nGrUBZmkTp_y6XTUNFtG3Jw8ykbYSPXyepSTTA-WZt0FG9NYgVXKsS1hWchEj080_Fg59Z5w0oXwq5nBDewwiUqOvab6ZqI1Twc_RPW9NCDxnkiHOkOLpgad0yNrfDK-G57dXEFUe4C2z_k4-8rN8OeEJfyCmAmXn7YnLbEuNKfIXLd39QNTPVHM154YXFi6XGj8hjbY0wE94u_N-Rf9B5VNhXM7YoDAnyDMS14bBJmJx7uYw5y7g5cYnj4%3D&request_ab2=96002&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=5&pl=https%3A%2F%2Funlimited.forumvi.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=324c5f66-eedb-44ac-a9a1-081c8883fba7&userId=512aecb7576042ed8ade244ba798c869&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Cookie: OAID=512aecb7576042ed8ade244ba798c869; oaidts=1670030069
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json
x-trace-id: 6bcafb4043bfd5e6e0fcfdf80be905a7
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=512aecb7576042ed8ade244ba798c869; expires=Sun, 03 Dec 2023 01:14:29 GMT; path=/; secure; SameSite=None
oaidts=1670030069; expires=Sun, 03 Dec 2023 01:14:29 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 10 Dec 2022 01:14:29 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3408
X-Firefox-Spdy: h2
illiweb.com/fa/favicon/discussion.ico
200 OK 0 B URL HTTP/2 illiweb.com/fa/favicon/discussion.ico
IP
GET /fa/favicon/discussion.ico HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://unlimited.forumvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:22 GMT
content-type: image/x-icon
last-modified: Mon, 27 Jan 2020 10:55:34 GMT
etag: W/"5e2ec1a6-94be"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 06 Jun 2023 23:05:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 15473361
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bqOyMTmLkpKuYo%2FH1%2Fr2gXMU8fv87Z1puJLjcEk1z2HIxW%2F65%2F44kPTzLjXsKU5QLXzC4u3%2FNZJ8YMp6vM5RIHRv%2FejRXS0Xs8rrtqXS9O2MigC2DndWYAl3II8bvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773871f18cc31c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/lang/vi.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/lang/vi.js
IP
GET /rs3/66/frm/lang/vi.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:27 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=73562
access-control-allow-origin: *
expires: Thu, 30 Nov 2023 05:33:09 GMT
last-modified: Thu, 08 Sep 2022 07:38:50 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 243678
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=206dlCP9DiTjf5EmCBci4kZ0jSyYM%2BIfC3yDKp042Cg58VfMEGLiveNStdGuHExEWekwrh1NU8xDA4LCLN4BD256dTgboXigkToGHn%2FnWC4kW3bb69GYvPpUYGIfcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773872145ceab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3407
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 98785
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 95999
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
x-crto-bundle: EsA0sV9PMThOUlUwak5yRk5wUjJxNmplT3c3dkNaR1FNVW1SZWdGVDRZSENockolMkJjNjhETzhVeEtibWt5VkJxZkR1RndKZVRLRXdjalFCZHVYSlRpU0p1SGNkTkpreWZldWclMkJ6dCUyRmg3U3Zub3B2aDg2bjd6Q0R4NEFlNUw1dElhdVpINEVjcUVWeDVlTW4wJTJCOGYxa3ExcVV0dyUzRCUzRA
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://unlimited.forumvi.com
server-processing-duration-in-ticks: 1933248
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=LMFJOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmM2RJbzFqeWJaRUxFZyUyQk8wQndTazk&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=LMFJOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmM2RJbzFqeWJaRUxFZyUyQk8wQndTazk&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=LMFJOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmM2RJbzFqeWJaRUxFZyUyQk8wQndTazk&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1183953
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=5vNYSl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmNnNTdCUyRk1GUyUyQnR6UEI3RVpRYXgzYQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=MklRZl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlekNNeVBYVk5Dd1dKVlRJT1ZJNDB4; expires=Thu, 28 Dec 2023 01:14:28 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 268102
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=Z_hYwF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlTGlQYjJqSlFPNUpXSGJtNFlzQXVw&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=Z_hYwF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlTGlQYjJqSlFPNUpXSGJtNFlzQXVw&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=forumvi.com&sn=FirefoxSyncframe&so=3&topUrl=unlimited.forumvi.com&bundle=vRXTZV83aEx4STRobDgyRDF0cWI3S3A2UExoa0ZMdXh2VlRDakM0WmhZUW1HYWFYZWpHWDMlMkZDdktzaWhGcVFJYmR3dEp3RGhGVEdHcmlPczVscDUxbkEzTWxpYXAzcndwVHJXbWd3WWp2aTBCZW52aVNjUkloMG9vejkwV21tSkZ0Z29YcUNjaWRLeTB1TmhaUm00S1BPY3RKQSUzRCUzRA&info=Z_hYwF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBlTGlQYjJqSlFPNUpXSGJtNFlzQXVw&idsd=-221353450,-758237258&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=unlimited.forumvi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 508687
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=undefined&cb=1670030068259&uv=3245&tms=1670030068259&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=8ded9b9b-ec19-4025-9f86-2d3c560be765&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=undefined&cb=1670030068259&uv=3245&tms=1670030068259&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=8ded9b9b-ec19-4025-9f86-2d3c560be765&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=5974485&dast=V7g7YCFgODw-K8HFMpUQSDw-K8HFMpUQUAAAAGBuIHJDhymZwT58St8jiWa9FgslorZ8bZWjLybFyzwcTlm62GQDIb48yzGK3cuo1l4hZtbI61wrZYrBUWz8JhnKyGI4tpChQzGAwvq8FAVHS9LXaH0-x569bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFZKNcQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsM4L_t9QA8-AA8EBWoFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjY0gYAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXogNXNtPBPDYOVceFyWhWs4cXkMM9ti4Vk4BwuTb3uhVaZAnbSnAH0UMxgML6vBQFR0vS12h9PseevmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCHMLk2u1Gi3XwtnCtRZNRoO1wrncrYUjy8q4W7lWLpthLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9q2Za-OZGAYr58Ljsixcw4nLY5jZFgvPwjlYmHz73sLkWq1Gy7VwtnCtRZPRYK1wLndr4ciyMu5WrpXLZliLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCci18yzMIwWm9XEthjNjLuNb-FxTkzG1XA1cW5sE7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT4Go5Gw!&cmcv=&pix=undefined&cb=1670030068259&uv=3245&tms=1670030068259&abt=amplean_vD!mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=8ded9b9b-ec19-4025-9f86-2d3c560be765&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.176805,VS0,VE21
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 55925
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
unlimited.forumvi.com/sw.js
200 OK 0 B URL HTTP/2 unlimited.forumvi.com/sw.js
IP
GET /sw.js HTTP/1.1
Host: unlimited.forumvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://unlimited.forumvi.com/
Connection: keep-alive
Cookie: exadd=167004; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; _ga=GA1.2.1383158272.1670030067; _gid=GA1.2.515142312.1670030067; _gat_gtag_UA_144347007_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:29 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 15:42:46 GMT
etag: W/"6388cb76-390a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660481&dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&cmcv=&pix=undefined&cb=1670030068288&uv=3245&tms=1670030068288&abt=mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0f336789-ca1f-4092-b6d4-b3e6228be43e&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660481&dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&cmcv=&pix=undefined&cb=1670030068288&uv=3245&tms=1670030068288&abt=mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0f336789-ca1f-4092-b6d4-b3e6228be43e&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8015557&crid=4660481&dast=V7Q8wCFgP5-0g_WxjLUQT5-0g_WxjLUQUAAAAGBuIHJDDzbGa74XKtcThmbtFgOVlLbCPTWuJZ2SaT4cRl2qyMQJKj4Wq2Go3cosXEtRZtDCO3cOOcrEUem8M0WCyGy91uChQzGAwvq8FAVHS9LXaH0-x5a9bggabT4XPd61V3s9PtNL1Mdpnf8nrbnnaN3-2XAwAAAMADwFFHAMQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABkAB1L4GwCcHwXvOfn8AADRsgQAACGCQAAiMr5QAQHiunQAAAAAAAAAAsPz____HAOg5FcsAWECv9gA8-AA8EBXwFjECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAAYTXjI30YAAAAgFjD9P5qpVdH0NgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTehu9TgtiGb1W-wUEAFj7BQQAYFM3AIC3ALiQ80DT6fC57vWqu9npdppeJrvMb3m9bU-7xu_2i46gFYPB6gJidgAAAAB3_____3gN0_urlV4dQXog45m4FoONczncTAYrx27iHAxHNtPEtlt5hhvTZHtliBPohxqbFn0UMxgML6vBQFR0vS12h9PseWvmR9GS5W65W40mi9FoudzshpvRYH8DMVgNcCIGy-VkspjsVqPVaDPcjWaDBQrEYIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCFPD3W5iHAzXouXGuRZtVia3crexrIUb52A3WWw8u43LLXp9TA_jaDLcrbYoGECxF8FFOpH5LTe_5fX2m55-u1v2tIglmpNFOpFd9h3PxLUYbJzL4WYyWDl2E-dgOLKZJrbdyjPcmCb71nC3mxgHw7VouXGuRZuVya3cbSxr4cY52E0WG89u43KLXh_TwziaDHerfWO2Gww2g8FsuW_MdoPBZjCYLfcdJtMz9Tkb_daT3yO03pzH9c7mMChcBov397lIm9HGzajShi0W1bW4c02sOm3sZOwczAaFb3hNDH8_9fPazd4OYoNBEUsEp4t0InoZTxexRPK0SCcah8e5me1WI9NgMpvZPCuLYWXyrDYOz8bj3MwME7FEabpIJ3qJ-o8MuZgrB3PRZK5YjVYJAAAAAAAAAGAJc-ZNAAAAAE6DGC4nk91yAR7i_XSBTQAAAAAAAHYT2JWiuGxT7IsbP4Ywv-Xmt7zeftPTb3fLnlYGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DJQEAAAAAAPAT5GiyGA!&cmcv=&pix=undefined&cb=1670030068288&uv=3245&tms=1670030068288&abt=mprdctdt6_vA!smbs!ufm&ft=1&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0f336789-ca1f-4092-b6d4-b3e6228be43e&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:30 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.231894,VS0,VE21
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7PG8CFgNJiZC9cc9cuwRJiZC9cc9cuwUAAAAGBuIHJOPcTRwOi2-tMTksa9FotXILl7PhWrOaWYwjj2vjG26GQFKbhcmzGBnXsslgsBbNVja3crAYrDUO48y1nGxWG8PIChE3GQ6fg4Go6Hpb7A6n2fMGDzSdDp_rXq-6m51up-llssv8ltfb9rRr_G6_HAAAAAAeAI46eiB-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAKoPY1AD45CN5z9vsDAKBhCwQAQACDBEBgfKUEAMJz7QQAAAAAAAAAgOX___8_BkDPqVgGwAJ6tQfgwQfggahguYgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACCKsZH5_CAAAAAMQapvdXK706gsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0BuuVFoQy-i12i8gAMDaLyAAAJu6AQC8BcCFnAeaTofPda9X3c1Ot9P0MtllfsvrbXvaNX63X3QErRgMVhcQswMAAAC4-____8drmN5frfTqCNIDmc1m4ZnMXC7fYDFYuGYW08xh8ow8xtnEM3JZjNtDXUp6kecbnO2LuMlw-BwMREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNjfQAxWA5yIwXI5mSwmu9VoNdoMd6PZYIECMZggRUtWy-VytdmsVrvRYjbYLIebDVK0ajUbbQbD1Wwy2-1Ww8FwORohRUuWu-VuNZosRqPlcrMbbkaDIcLAyrgymYzDtcIw26xFm5VzrVzOPGvdyrlZLhwz53I1WYteH9PDOJoMd6stCgZQ7EVwkU5kfsvNb3m9_aan3-6WPS1iieZkkU5kl31ns1l4JjOXyzdYDBaumcU0c5g8I49xNvGMXBbjvrAyrkwm43CtMMw2a9Fm5VwrlzPPWrdybpYLx8y5XE3WotfH9DCOJsPdat-Y7QaDzWAwW-4bs91gsBkMZst9h8n0TH3ORr_15PcIrTfncb2zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJZLHwLDe7zcRkWBkGM5tjtpgZJ87JbLDyzSyzhUUsUZou0oleov4jQy7mysFcNJkrVqNVAgAAAAAAAABYwpx5EwAAAIDTIIbLyWS3XICHeD9dYBMAAAAAAIDdBHalKC7bFPvixo8hzG-5-S2vt9_09NvdsqeVAR6oyZk3eyaItVotawAAAAFsAACAAG7dvAVgM3L7QEkAAAAAAAD8BLgczAY!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 01:14:30 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3407
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=mpLIn180M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmU040TE1WNWJDb2QwZVdtNk5QZHpo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=LMFJOF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVvaVl5UFR6JTJGYzQlMkJSSTlaY0dFQVBmM2RJbzFqeWJaRUxFZyUyQk8wQndTazk; expires=Thu, 28 Dec 2023 01:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 328483
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forforumotion-vi&unitType=226&tbloc=&pageType=text&pstn=300x250%20Thumbnails-7&uuip=&cisrf=https%3A%2F%2Funlimited.forumvi.com%2F&cirf=https%3A%2F%2Funlimited.forumvi.com%2F&encoded=1&uid=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&variant=-100|1&callback=TRC.videoTagCallbacks.videoCallback1&cb=1670030067605&tagid=&cntry=NO&platform=1&sesid=5f5c3b00e9ace2a58bec0f61a3a90ad7&itemid=/&viewid=1670030067323&geolat=&geoing=&deviceifa=&appid=&sd=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d5f3a04135b614f87c7ac9bd8585b9c6&appname=&cdb=&gdprApplies=true&rid=&sii=715028154153314806&oee=true&tpubid=1044862&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8596
200 OK 0 B URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forforumotion-vi&unitType=226&tbloc=&pageType=text&pstn=300x250%20Thumbnails-7&uuip=&cisrf=https%3A%2F%2Funlimited.forumvi.com%2F&cirf=https%3A%2F%2Funlimited.forumvi.com%2F&encoded=1&uid=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&variant=-100|1&callback=TRC.videoTagCallbacks.videoCallback1&cb=1670030067605&tagid=&cntry=NO&platform=1&sesid=5f5c3b00e9ace2a58bec0f61a3a90ad7&itemid=/&viewid=1670030067323&geolat=&geoing=&deviceifa=&appid=&sd=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d5f3a04135b614f87c7ac9bd8585b9c6&appname=&cdb=&gdprApplies=true&rid=&sii=715028154153314806&oee=true&tpubid=1044862&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8596
IP
GET /tb?oid=15&pubnm=forforumotion-vi&unitType=226&tbloc=&pageType=text&pstn=300x250%20Thumbnails-7&uuip=&cisrf=https%3A%2F%2Funlimited.forumvi.com%2F&cirf=https%3A%2F%2Funlimited.forumvi.com%2F&encoded=1&uid=7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875&variant=-100|1&callback=TRC.videoTagCallbacks.videoCallback1&cb=1670030067605&tagid=&cntry=NO&platform=1&sesid=5f5c3b00e9ace2a58bec0f61a3a90ad7&itemid=/&viewid=1670030067323&geolat=&geoing=&deviceifa=&appid=&sd=v2_5f5c3b00e9ace2a58bec0f61a3a90ad7_7ad55549-86a5-4240-a997-8d2e87e5eef0-tucta842875_1670030069_1670030069_CIi3jgYQ_uI_GPuMsqzNMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d5f3a04135b614f87c7ac9bd8585b9c6&appname=&cdb=&gdprApplies=true&rid=&sii=715028154153314806&oee=true&tpubid=1044862&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8596 HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://unlimited.forumvi.com
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1450
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://unlimited.forumvi.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 03 Dec 2022 01:14:29 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670030070.522782,VS0,VE44
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=unlimited.forumvi.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=unlimited.forumvi.com
IP
GET /syncframe?origin=publishertag&topUrl=unlimited.forumvi.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:27 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=b8727435-c2a7-40f6-991a-0f1baf95a293; expires=Thu, 28 Dec 2023 01:14:28 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 288611
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 0 B URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unlimited.forumvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 01:14:28 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 3325
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RCeLBiG%2BalabJzKsj6FJUhZLRTKmdWY0wGBpUN9Oie4iV5QXVEgdjjbV%2Fk3NAb3mPYIYzFz%2FrfbTKS43ZStP4LmCGZF9rG5unk7oF16Sins0%2FwXv16R0Dw0CgeDZ0E6GsfRoQoxL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77387217bc9bb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
94.23.150.222
172.217.21.170
178.250.0.157
185.106.33.48
93.184.220.29
188.114.97.1
104.18.32.68
34.246.116.79
23.33.119.27
94.23.76.111