app.temu.com/m/8cpIXJrhaPceA
301 Moved Permanently 166 B URL HTTP/1.1 app.temu.com/m/8cpIXJrhaPceA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /m/8cpIXJrhaPceA HTTP/1.1
Host: app.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Nginx
Date: Sat, 25 Mar 2023 23:09:45 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://app.temu.com/m/8cpIXJrhaPceA
x-yak-request-id: 1679785785226-b9c184fa264ed978fe8be0830cfb905a
strict-transport-security: max-age=2592000
Set-Cookie: api_uid=CmyvSmQffzmWNQBkaeheAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14265
Expires: Sun, 26 Mar 2023 03:07:30 GMT
Date: Sat, 25 Mar 2023 23:09:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14574
Expires: Sun, 26 Mar 2023 03:12:39 GMT
Date: Sat, 25 Mar 2023 23:09:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 22:15:29 GMT
content-type: application/json
age: 3256
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6221
Expires: Sun, 26 Mar 2023 00:53:26 GMT
Date: Sat, 25 Mar 2023 23:09:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5CI5hCv7iLrjRp1joWTkWd716vn5NKDh/CMtSEIlIMds9IIH99c2haNYE831C6HEO9/sHraNSz4=
x-amz-request-id: 5ST9447P26RBG7R9
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 23:00:58 GMT
age: 527
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:09:45 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c6cae026284899160b055cfc82b17837
7c0d3935a1a970f9e96f421a13f9305679901a14
2d5224b786f1c86869ea69a5a226418e50cd8496f3812e2a10dcded0953253d0
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 19:42:28 GMT
Expires: Sun, 26 Mar 2023 19:42:28 GMT
ETag: "7c0d3935a1a970f9e96f421a13f9305679901a14"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
app.temu.com/m/8cpIXJrhaPceA
302 Found 0 B URL HTTP/2 app.temu.com/m/8cpIXJrhaPceA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m/8cpIXJrhaPceA HTTP/1.1
Host: app.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: Nginx
date: Sat, 25 Mar 2023 23:09:45 GMT
content-length: 0
location: https://www.temu.com/link-app?originalUrl=&redirectUrl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&scheme=temu%3A%2F%2Fcom.einnovation.temu%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb
x-yak-request-id: 1679785785824-530694dcfeb144da877f3e954a50ac04
strict-transport-security: max-age=2592000
set-cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 22:17:24 GMT
age: 3141
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5849
Expires: Sun, 26 Mar 2023 00:47:15 GMT
Date: Sat, 25 Mar 2023 23:09:46 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pInt5NieBi0qXJaN451Tjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4k4UIuK7w61UXesroU1ya1BLzF8=
aimg.kwcdn.com/upload_aimg/promotion/405ab653-26dd-45a5-ba0e-8a0e2d48358b.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 1.1 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/405ab653-26dd-45a5-ba0e-8a0e2d48358b.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d6f7262c1b17b555f6983392663190fa
3f74d002cb05a5582f8f924d93d3b3c7ad40ed77
0680ca8e5d97cd2a932a67568b3448430c41aad7f0170fb19da29f0f5a5d2ae1
GET /upload_aimg/promotion/405ab653-26dd-45a5-ba0e-8a0e2d48358b.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 1114
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 08:13:56 GMT
request-id: f24a382fc210d538fb92b4d61a5c8a21
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd9320b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/moon/a1456640-f83a-49c9-a1fe-1b6a6b4ff7e3.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 2.9 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/moon/a1456640-f83a-49c9-a1fe-1b6a6b4ff7e3.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 71b099f3212f3f29aee7898e2f10c5b0
ee99297d3db213aaf2b23b5626c8baff91e95eba
6d0acdaba35d533a78db18ecd4854d63956368a1309beb38dfe87593e226b114
GET /upload_aimg/moon/a1456640-f83a-49c9-a1fe-1b6a6b4ff7e3.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 2884
cache-control: max-age=31536000
last-modified: Fri, 03 Mar 2023 09:31:52 GMT
request-id: 3f80c53f05d0b78b25599913fd5f6da7
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd9290b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/b158c768-dc7c-408a-9fa2-7cc116ed6779.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 5.3 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/b158c768-dc7c-408a-9fa2-7cc116ed6779.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 76db9fb93bc34b4c47a5bc444518b03d
84156d9f4f35a0c9b550c7a2d78fd8398e291713
b457a5453689859c8ba4e83ff80305677f563212d90c36ca3a22dc4b7516b4a4
GET /upload_aimg/promotion/b158c768-dc7c-408a-9fa2-7cc116ed6779.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 5262
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 03:15:21 GMT
request-id: 3f2dffb3122f0d0005f8f9eef285748f
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd92d0b51-OSL
X-Firefox-Spdy: h2
www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
200 OK 71 kB URL HTTP/2 www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 6911e3fa92dd20432af0974aa2131cc1
13ef9bb58011e10a43b731c652e623f280bc9269
0d06be3198479e4ef1ca92a3a5efa951b2d815f18ec080a5e7dcd2dcddd30814
GET /cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, iris-context-client-language, User-Agent
content-language: en
set-cookie: AccessToken=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
PDDAccessToken=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
user_uin=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
pdd_user_uin=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
pdd_user_id=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-accel-buffering: no
content-encoding: gzip
x-yak-request-id: 1679785786483-66141f39f3eeab5a625c5cb790944b54
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/moon/d3070083-f72c-4db4-8690-8dcca6d4f157.png.slim.png?imageView2/2/w/1300/q/80/format/webp
200 OK 1.4 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/moon/d3070083-f72c-4db4-8690-8dcca6d4f157.png.slim.png?imageView2/2/w/1300/q/80/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 132f53d1eb0fede6d1b95267f70a28bb
2f00ee70a5efa81801bdbd5c7144502cd71a07c4
0231740cea714752ac8d0f3d8442292d33eb60aa74c220ddd84c2f31ac91073d
GET /upload_aimg/moon/d3070083-f72c-4db4-8690-8dcca6d4f157.png.slim.png?imageView2/2/w/1300/q/80/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 1364
cache-control: max-age=31536000
last-modified: Fri, 03 Mar 2023 09:31:52 GMT
request-id: 9bfd56e284d3299a5f528c2242da27fc
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd9300b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/c0b28599-eb5c-4678-b52e-cfbc8ce4d20e.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 1.6 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/c0b28599-eb5c-4678-b52e-cfbc8ce4d20e.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b13386d6c9babafb459bf36256a60d8b
f7f4ea1af741b9939f6792e44496d508b97fb98f
8476cf2cea9fac6d387fb24ece852a35cbe66fae4713f9e80b9874d3782df1e4
GET /upload_aimg/promotion/c0b28599-eb5c-4678-b52e-cfbc8ce4d20e.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 1592
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 08:13:56 GMT
request-id: afbcaaa63ecf85d798899df5c12d2809
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe94e0b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/2cbc6d83-74d3-4f0e-82e5-388270f988c3.jpg.slim.jpeg?imageView2/2/w/1920/q/80/format/webp
200 OK 11 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/2cbc6d83-74d3-4f0e-82e5-388270f988c3.jpg.slim.jpeg?imageView2/2/w/1920/q/80/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 951aa39d92b210ec6f7d11b5788ebba1
f9eae131a36c45e05be978c2fc8efd3c59bfb24b
9386099d2b878cd28b8458182bd45708523702812ca78cd57d4bcd3d2ff7b337
GET /upload_aimg/promotion/2cbc6d83-74d3-4f0e-82e5-388270f988c3.jpg.slim.jpeg?imageView2/2/w/1920/q/80/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 11132
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 03:15:21 GMT
request-id: 230ce2517d1ae852bf59a35fa58e4460
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe9490b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/637a49b8-8289-4703-9839-efe86e8ed111.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 1.6 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/637a49b8-8289-4703-9839-efe86e8ed111.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2f10c45b4bcaf0f064ab3377c025aa53
f7cc738cd247c289885a1184e12c7e5e1b477058
ef288edc593e8336197b9640b3c5a75121898d6a9b439d2961b37015f69fd2d4
GET /upload_aimg/promotion/637a49b8-8289-4703-9839-efe86e8ed111.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 1638
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 08:13:56 GMT
request-id: 4f2db69d8a0bb3f1a09e5b5c51bf44af
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe94d0b51-OSL
X-Firefox-Spdy: h2
avatar-us.kwcdn.com/avatar/b/MjEx/CgI2WRIITFY5bFRzOUQaEEUPGomNCg9728PSpGjMYxYwAg-1671736658?imageMogr2/thumbnail/100x
200 OK 3.5 kB URL HTTP/2 avatar-us.kwcdn.com/avatar/b/MjEx/CgI2WRIITFY5bFRzOUQaEEUPGomNCg9728PSpGjMYxYwAg-1671736658?imageMogr2/thumbnail/100x
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 100x100, components 3\012- data
Hash db307b55d1297b472056e4bad8261faa
78b55f1b46986845fb6ef21ca4b15a6a785418ee
b3891a6fe5f1413a58f056549474fe541e7ba29ea47119b8c27775c71b971ac1
GET /avatar/b/MjEx/CgI2WRIITFY5bFRzOUQaEEUPGomNCg9728PSpGjMYxYwAg-1671736658?imageMogr2/thumbnail/100x HTTP/1.1
Host: avatar-us.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/jpeg
content-length: 3460
cache-control: max-age=31536000
cf-bgj: h2pri
last-modified: Sat, 25 Mar 2023 13:49:33 GMT
request-id: d22e227c2348d7f0c1995082fefbbf8a
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe94b0b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/13e079f2-c7a2-4491-9994-49009b86e94b.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 10 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/13e079f2-c7a2-4491-9994-49009b86e94b.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7fb1bbfcc8f38f2a06b96dc4af336078
d549df1149185d3d120c32edd5041a08bd518a09
dde246a7f8d1e03a17bd7dcd161102efa8dfd725cef7d5753f846b5f8d1eeb60
GET /upload_aimg/promotion/13e079f2-c7a2-4491-9994-49009b86e94b.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 10380
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 09:14:30 GMT
request-id: dcefa54750dbf4bf1be2f30837969cc6
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe94c0b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/25523531-8e2f-4217-930d-2e93a233734b.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 24 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/25523531-8e2f-4217-930d-2e93a233734b.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 54c4d7c93482a2031bbcefdc771d6a98
157c348ee88d91fec58214c4f0f0521ee4711ea0
83ad9498b5a6a2525bb7c55c93f28053932efe9f68bad1a1dc0da7540631f673
GET /upload_aimg/promotion/25523531-8e2f-4217-930d-2e93a233734b.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 24540
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 01:42:18 GMT
request-id: eca045766727b2f0daa3d048bce49e4a
x-avi-image-cache: hit
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd9340b51-OSL
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/6452e011-1b29-4261-bbbe-2858fa92dbf0.png.slim.png?imageView2/2/w/1300/q/80/format/webp
200 OK 21 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/6452e011-1b29-4261-bbbe-2858fa92dbf0.png.slim.png?imageView2/2/w/1300/q/80/format/webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4356648934553e7ba797f4e0aeba9989
c718911efa80de3b6d16c3ee7ab4988fb2fe6beb
639fa439f5160deb2cab8ac773264bb44f6132b032ca1dc91fe860feb4de0160
GET /upload_aimg/promotion/6452e011-1b29-4261-bbbe-2858fa92dbf0.png.slim.png?imageView2/2/w/1300/q/80/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 21074
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 01:42:19 GMT
request-id: 874b2b6552a54d1e02f8eb97c1ff436a
x-avi-image-cache: hit
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfe9470b51-OSL
X-Firefox-Spdy: h2
www.temu.com/favicon.ico
200 OK 51 kB IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash ca9015be4ab7dc1f082fe3b875844b8e
877b252872cee1a70238bd16e3ef4adbbad35604
2d0ad69b297be72415ca42beddee33a86a99483490c1b1d2e34e6a4a0fe86c87
GET /favicon.ico HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: image/x-icon
cache-control: max-age=3600
x-yak-request-id: 1679785787058-1fee2f4eca5ec1e6d9dbc9b6314dd93c
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
vary: User-Agent
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NSR6SG3
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NSR6SG3
IP
File type ASCII text, with very long lines (7937)
Hash 2931d9464c484f12d51dea1e4e1d5eea
59ddd565aaa66b71d1501984e54f2e196b163d50
7941dc6d36dc01e31b28a02dd0f23efe7c6dd5d3270e5b8c098a633ba8ca4e8c
GET /gtm.js?id=GTM-NSR6SG3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:09:47 GMT
expires: Sat, 25 Mar 2023 23:09:47 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Mar 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74072
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e6775cb573aaee995c89d41b6be93723
cad165485f34023136370b32999077f4928c68c5
c14056ae20c7cd552209571a3430df2711ec94a5f8ee42c1693a3bf2d04b30ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aimg.kwcdn.com/upload_aimg/core-ui/spinner.png
200 OK 1.0 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/core-ui/spinner.png
IP
File type PNG image data, 51 x 51, 8-bit colormap, non-interlaced\012- data
Hash 5d6419068b5aa226b7ed53b273038228
1996b45043cb0f8a060d2dc402ff75b9190b4798
949246448d04be1589d864b07b5858c2d38b8d1a34c7f4bbc796b34ab49c540f
GET /upload_aimg/core-ui/spinner.png HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: image/png
content-length: 1045
cache-control: max-age=31536000
last-modified: Thu, 17 Nov 2022 17:44:50 GMT
request-id: ca662efecc858d87166464cb0f3a4300
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
age: 9219932
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d3cced0b51-OSL
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 90950127b4ab17626438c88529670c82
b4dba0040b5f4c2feee29212a7038d24e65e2c6c
d457387a368e13b6ca3efce5ad337cdeb69987f10bf3f4ee6ee3e71d52cb3f57
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 20:13:37 GMT
Expires: Sun, 26 Mar 2023 20:13:37 GMT
ETag: "b4dba0040b5f4c2feee29212a7038d24e65e2c6c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6040
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:09:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6040
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:09:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6040
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:09:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6040
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:09:47 GMT
Connection: keep-alive
www.temu.com/api/media/utils/shorten/url
200 OK 104 B URL HTTP/2 www.temu.com/api/media/utils/shorten/url
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 9b43348bb3f5d1c2a0b0f17883be4e52
b94deda0253d588c840f23001ae4ee33cb076295
4c5c9b7a8876f0f8fa59ea3fdbc4df4f3751f9dcc7c00331ede9954bd02a047a
POST /api/media/utils/shorten/url HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 912
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=utf-8
content-length: 104
content-encoding: gzip
x-yak-request-id: 1679785787533-ef0a605baf223dd20026eae1e3ae598d
access-control-allow-origin: https://www.temu.com
vary: Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787533|7
cip: 91.90.42.154
X-Firefox-Spdy: h2
locale.temu.com/api/bg/huygens/region/locate
200 OK 7.8 kB URL HTTP/2 locale.temu.com/api/bg/huygens/region/locate
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash a434a0841030ace342e5ff40e1040410
6934ac0fa173eff29c37f9ccd2a4ccf5b11f0976
ca31240ce54df4901ab0ed50ec1b46c6c2c83b58248ff7f1739ff1e4c7d84c42
OPTIONS /api/bg/huygens/region/locate HTTP/1.1
Host: locale.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.temu.com/
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/octet-stream
x-yak-request-id: 1679785787462-36ffb9f37937c7419e358b85c3844716
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
yak-timeinfo: 1679785787462|0
set-cookie: api_uid=Cm3Ax2QffzuAHwEubPLOAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
content-encoding: gzip
cip: 91.90.42.154
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/cash-tree-download_7652e87c3edf1d80.js
200 OK 16 kB URL HTTP/2 static.kwcdn.com/m-assets/assets/js/cash-tree-download_7652e87c3edf1d80.js
IP
File type ASCII text, with very long lines (27806)
Hash d1601600464e35464a6713229df86dea
76242e314cb02857bef6e3136297a74de11f133c
6757cecbefbb99a01fd460d0f64d5e5cf5e1165afe780a8a292403232e3bd143
GET /m-assets/assets/js/cash-tree-download_7652e87c3edf1d80.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: aBhl7c4n//IKSN/wfOGHmg==
etag: W/"681865edce27fff20a48dff07ce1879a"
last-modified: Tue, 21 Mar 2023 09:23:38 GMT
x-content-type-options: nosniff
x-pos-request-id: f3ba0aa9-001e-0033-1390-5c89ef000000
cf-cache-status: HIT
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d00a510b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d54efd2b1b21530d0da6f7a622ea898e
656849322a4885c98f1f06600f3c4680522d78d0
88d941b88e10152a49bd5e07bb6d7f31a1e3b2841562985d1869f5eea6aacf7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: ea6a8cc6-98ee-4d42-9cb7-73087027dde2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1soGZRIAMF0-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-32b521b073af557b282cb6b4;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: amzRKsV1FYQWrlBPncqtBdU6rnpKISHPETSvZQSE6VPULbYEmGW_CQ==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:27 GMT
age: 4700
etag: "656849322a4885c98f1f06600f3c4680522d78d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dc799aaa2f69ef1109501a605dbdcfd
58cefa986d580ee408fbca288e3e45ba86fb97ac
54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9124
x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kUESiIAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:50:36 GMT
age: 4751
etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 08:51:06 GMT
age: 51521
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8a2437b3c9ab01cd0e2327d4be5c61a
33573e5a6b6c1912702040c6d880c362baf0c3db
2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: HJYBgmjUNbjdPrncK3FAPRUykhg3R25vwcbN6jA4K23HPwRUVDCdpA==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:29 GMT
age: 4698
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.temu.com/api/sec-csp/c/sec-gif
200 OK 0 B URL HTTP/2 www.temu.com/api/sec-csp/c/sec-gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/sec-csp/c/sec-gif HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1604
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-length: 0
x-yak-request-id: 1679785787765-4be55dd6111e6da6b73278b18afa5c42
access-control-allow-origin: https://www.temu.com
vary: Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787765|2
set-cookie: api_uid=CmzGrWQffzubDACybDkdAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
X-Firefox-Spdy: h2
www.temu.com/api/server/_stm?t=1679785801273
200 OK 1.8 kB URL HTTP/2 www.temu.com/api/server/_stm?t=1679785801273
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 27fa0e103753e34088dad9c1523c420e
513fbbf7006a85b4c087d2881fc326a0625fb4c0
aeb5369118353a9914fe7a3c23682ac1207ae90e7d97edc3adbcd699517db743
GET /api/server/_stm?t=1679785801273 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json
vary: Accept-Encoding
cip: 91.90.42.154
cache-control: no-cache, no-store
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cb82271239c497695a1a099e41654801
0917de1f6cabdc844addc5973b9a6e2ff66c6fd5
f103d413b0742c75ead43d836adb84e38adaabc7d57d01f774c6803f6cbf097e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 20:27:36 GMT
Expires: Sun, 26 Mar 2023 20:27:36 GMT
ETag: "0917de1f6cabdc844addc5973b9a6e2ff66c6fd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cb82271239c497695a1a099e41654801
0917de1f6cabdc844addc5973b9a6e2ff66c6fd5
f103d413b0742c75ead43d836adb84e38adaabc7d57d01f774c6803f6cbf097e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 20:27:36 GMT
Expires: Sun, 26 Mar 2023 20:27:36 GMT
ETag: "0917de1f6cabdc844addc5973b9a6e2ff66c6fd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cb82271239c497695a1a099e41654801
0917de1f6cabdc844addc5973b9a6e2ff66c6fd5
f103d413b0742c75ead43d836adb84e38adaabc7d57d01f774c6803f6cbf097e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 20:27:36 GMT
Expires: Sun, 26 Mar 2023 20:27:36 GMT
ETag: "0917de1f6cabdc844addc5973b9a6e2ff66c6fd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
us.matk.temu.com/web/wtm
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web/wtm HTTP/1.1
Host: us.matk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 842
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; _gcl_au=1.1.617619934.1679785802; _bee=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; njrpl=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; dilx=45r4vvlBBWr2foNDp2nwR; _ga_R8YHFZCMMX=GS1.1.1679785801.1.0.1679785801.60.0.0; _ga=GA1.1.73810786.1679785802
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache,private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
vary: Accept-Encoding
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken
x-cache: CONFIG_NOCACHE
x-azure-ref: 0O38fZAAAAADCxPHW3DcjQ5PWydAB+vLkU1ZHMjBFREdFMDYxOABhMDc1YzM2Zi1iMDVjLTQ3NDktYjMyNS1iMWJmNmJlNzVjODM=
date: Sat, 25 Mar 2023 23:09:48 GMT
content-length: 0
X-Firefox-Spdy: h2
us.matk.temu.com/web/wtm
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web/wtm HTTP/1.1
Host: us.matk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 826
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; _gcl_au=1.1.617619934.1679785802
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache,private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
vary: Accept-Encoding
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken
x-cache: CONFIG_NOCACHE
x-azure-ref: 0O38fZAAAAAA1YKr427UuS4VBSPrV4wVSU1ZHMjBFREdFMDYxOABhMDc1YzM2Zi1iMDVjLTQ3NDktYjMyNS1iMWJmNmJlNzVjODM=
date: Sat, 25 Mar 2023 23:09:48 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e238f2cddfe84e0a121d3487a472966
a34fd427f8cbcb80527fbcdfbe61a6bcb3ad32bc
11dda96d87d41c7ab95ceb83886b4cd53664b6d4bc0125c352a95340584370c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1068
Cache-Control: max-age=158192
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Etag: "641f4200-1d7"
Expires: Mon, 27 Mar 2023 19:06:20 GMT
Last-Modified: Sat, 25 Mar 2023 18:48:32 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef8608ef03d2e48c9cd6b665e8b3a946
894e7d4897dabb155138a7cbad323943c0c95122
b1a0d70bdae876e192cb4b9ba7c7f8fb7064ef3796a5d48e14c7b014789f63c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/10974797857/?random=1679785801637&cv=11&fst=1679785801637&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&hn=www.googleadservices.com&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&auid=617619934.1679785802&data=event%3Dpage_view&rfmt=3&fmt=4
200 OK 1.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10974797857/?random=1679785801637&cv=11&fst=1679785801637&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&hn=www.googleadservices.com&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&auid=617619934.1679785802&data=event%3Dpage_view&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3573), with no line terminators
Hash b887545574216a55c0d6575dcda644bf
3d818247d8d2adb6938db7bc01edf612b1191972
30fedc7a4f8c2bbad4afd0da0b177b46b96dfca7107254603ec3c7f6d5012c4d
GET /pagead/viewthroughconversion/10974797857/?random=1679785801637&cv=11&fst=1679785801637&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&hn=www.googleadservices.com&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&auid=617619934.1679785802&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1479
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 25-Mar-2023 23:24:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1&z=1568146335
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1&z=1568146335
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1&z=1568146335 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64347)
Hash 7fc8bce5d342b4898e6c82cc61313763
4aa4da15b55d59fc1a3a640a443cbde675d5e407
e456006ad9bc83651e868be3c53fa3fe93247a23b4fedf3b8c836fdf2c0c7de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: eDSrWWJsdcXbN84GX8E+2WI0tpTSHm1kJrR4CF0Vdxim6TFouUApCXUeBuXJVPvU0KrBAP/g4/9vD49eEVR4GQ==
content-length: 27907
x-fb-trip-id: 1679558926
date: Sat, 25 Mar 2023 23:09:48 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&_gaz=1&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_s=1&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&_gaz=1&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_s=1&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&_gaz=1&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_s=1&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=scroll&epn.percent_scrolled=90&_et=8
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=scroll&epn.percent_scrolled=90&_et=8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=346570642&cid=73810786.1679785802&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679785801&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&dt=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&en=scroll&epn.percent_scrolled=90&_et=8 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e238f2cddfe84e0a121d3487a472966
a34fd427f8cbcb80527fbcdfbe61a6bcb3ad32bc
11dda96d87d41c7ab95ceb83886b4cd53664b6d4bc0125c352a95340584370c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 27
Cache-Control: max-age=157151
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Etag: "641f4200-1d7"
Expires: Mon, 27 Mar 2023 18:48:59 GMT
Last-Modified: Sat, 25 Mar 2023 18:48:32 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
stats.g.doubleclick.net/g/collect?v=2&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX&cid=73810786.1679785802>m=45je33m0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef8608ef03d2e48c9cd6b665e8b3a946
894e7d4897dabb155138a7cbad323943c0c95122
b1a0d70bdae876e192cb4b9ba7c7f8fb7064ef3796a5d48e14c7b014789f63c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.temu.com/api/sec-csp/c/sec-gif
200 OK 0 B URL HTTP/2 www.temu.com/api/sec-csp/c/sec-gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/sec-csp/c/sec-gif HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 3076
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:48 GMT
content-length: 0
x-yak-request-id: 1679785788395-c0d89c9582fc3e8af4ffa13e54fe3782
access-control-allow-origin: https://www.temu.com
vary: Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785788395|1
set-cookie: api_uid=CmzeT2QffzwEGQD9bQlqAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/api
200 OK 472 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/api
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 6bac14ff70f1fb910e47debdd40434da
c2ce59c6cae9af589143a911a086f35db830654d
670d54ab31df749a0b913c0d490e3b1cf835aff2df965d7b6522c6e9ad3d6be2
POST /pmm/api/pmm/api HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1210
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; _gcl_au=1.1.617619934.1679785802; _bee=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; njrpl=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; dilx=45r4vvlBBWr2foNDp2nwR
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:46 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10974797857/?random=1679785801637&cv=11&fst=1679785200000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3723725748&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10974797857/?random=1679785801637&cv=11&fst=1679785200000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3723725748&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10974797857/?random=1679785801637&cv=11&fst=1679785200000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&frm=0&tiba=Temu%20%7C%20Explore%20the%20Latest%20Clothing%2C%20Beauty%2C%20Home%2C%20Jewelry%20%26%20More&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3723725748&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:09:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7e3ff6b78faf64b75d13e5e4c390f7c5
1ec395988633a280be5876ea74b91b994ca88bda
470501dd8e4cb351f2b3effe7507b9582758ecf492d587545f740c13527289d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:09:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&rl=&if=false&ts=1679785802851&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679785802851.1244482992&it=1679785802475&coo=false&tm=1&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&rl=&if=false&ts=1679785802851&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679785802851.1244482992&it=1679785802475&coo=false&tm=1&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110418 bytes)
Hash 4130279a91cf9ee825a8358dd1e60488
3ce44ed16768bec719d902fc2511d8eb23a08956
50668287d099e8b550010c414fd86d9aed646d3b4cc0074d34c2b48f0eba908c
GET /tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&rl=&if=false&ts=1679785802851&sw=1280&sh=1024&v=2.9.100&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679785802851.1244482992&it=1679785802475&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 25 Mar 2023 23:09:48 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cb82271239c497695a1a099e41654801
0917de1f6cabdc844addc5973b9a6e2ff66c6fd5
f103d413b0742c75ead43d836adb84e38adaabc7d57d01f774c6803f6cbf097e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:09:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 20:27:36 GMT
Expires: Sun, 26 Mar 2023 20:27:36 GMT
ETag: "0917de1f6cabdc844addc5973b9a6e2ff66c6fd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
static.kwcdn.com/m-assets/assets/js/vendors_d234e6d20f584ae9.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/vendors_d234e6d20f584ae9.js
IP
GET /m-assets/assets/js/vendors_d234e6d20f584ae9.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: rI7fWtYuqT5J1jXtD8I+rw==
etag: W/"ac8edf5ad62ea93e49d635ed0fc23eaf"
last-modified: Mon, 06 Mar 2023 08:19:18 GMT
x-content-type-options: nosniff
x-pos-request-id: 93ff6d51-101e-00ae-0904-50b183000000
cf-cache-status: HIT
age: 142548
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d00a4e0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/api
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/api
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/api HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1159
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:46 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.temu.com/api/server/_stm
200 OK 0 B URL HTTP/2 www.temu.com/api/server/_stm
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /api/server/_stm HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json
vary: Accept-Encoding
cip: 91.90.42.154
cache-control: no-cache, no-store
content-encoding: gzip
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/api
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/api
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/api HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1180
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:48 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/l1
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/l1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /api/phantom/xg/pfb/l1 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-yak-request-id: 1679785787473-020dd4ec4924118b840a98d8e0ea3b60
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787473|2
cip: 91.90.42.154
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/156_f7982f8baa5b0b72.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/156_f7982f8baa5b0b72.js
IP
GET /m-assets/assets/js/156_f7982f8baa5b0b72.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: 6RdlKGqy07d550QGnrBxGQ==
etag: W/"e91765286ab2d3b779e744069eb07119"
last-modified: Sun, 12 Mar 2023 02:33:36 GMT
x-content-type-options: nosniff
x-pos-request-id: 0f7ace0b-501e-0096-4ca7-54c883000000
cf-cache-status: HIT
age: 1066552
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d00a540b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
locale.temu.com/api/bg/huygens/region/locate
200 OK 0 B URL HTTP/2 locale.temu.com/api/bg/huygens/region/locate
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /api/bg/huygens/region/locate HTTP/1.1
Host: locale.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 2
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
x-yak-request-id: 1679785787571-adda7d126921631a59053d4230fa92b7
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
yak-timeinfo: 1679785787571|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
aimg.kwcdn.com/upload_aimg/promotion/b06b05b0-705b-4847-a40f-c82015a1c4e5.png.slim.png?imageView2/2/w/800/q/70/format/webp
200 OK 0 B URL HTTP/2 aimg.kwcdn.com/upload_aimg/promotion/b06b05b0-705b-4847-a40f-c82015a1c4e5.png.slim.png?imageView2/2/w/800/q/70/format/webp
IP
GET /upload_aimg/promotion/b06b05b0-705b-4847-a40f-c82015a1c4e5.png.slim.png?imageView2/2/w/800/q/70/format/webp HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: image/webp
content-length: 25026
cache-control: max-age=31536000
last-modified: Sun, 26 Feb 2023 01:42:18 GMT
request-id: 7ce19f238769c6eadfd11b4e4bea7d68
x-avi-image-cache: hit
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2cfd9330b51-OSL
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/biz_vendors_ff2b7f3d73af84e4.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/biz_vendors_ff2b7f3d73af84e4.js
IP
GET /m-assets/assets/js/biz_vendors_ff2b7f3d73af84e4.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:46 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: v4BewfG+lvrQg5zkAOqzhw==
etag: W/"bf805ec1f1be96fad0839ce400eab387"
last-modified: Fri, 24 Mar 2023 07:19:58 GMT
x-content-type-options: nosniff
x-pos-request-id: 9a3d7b44-901e-008a-4e22-5e8cb8000000
cf-cache-status: HIT
age: 142548
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d00a490b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/risk-control-anti_30a8de270aec123e.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/risk-control-anti_30a8de270aec123e.js
IP
GET /m-assets/assets/js/risk-control-anti_30a8de270aec123e.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: PFg05ZAimI0vviFptaE9JA==
etag: W/"3c5834e59022988d2fbe2169b5a13d24"
last-modified: Fri, 16 Dec 2022 06:15:33 GMT
x-content-type-options: nosniff
x-pos-request-id: ccf9c2de-c01e-003f-7f17-117df6000000
cf-cache-status: HIT
age: 142548
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7adad2d14b8b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/a4
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /api/phantom/xg/pfb/a4 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 2099
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=UTF-8
set-cookie: _bee=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
njrpl=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
dilx=45r4vvlBBWr2foNDp2nwR; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
content-encoding: gzip
x-yak-request-id: 1679785787482-41d844c63e281cbc68dcc2e9303c7fa5
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787482|22
cip: 91.90.42.154
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/api
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/api
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/api HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1227
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; _gcl_au=1.1.617619934.1679785802; _bee=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; njrpl=4kZIy6CpzOOt5dKuVKVJUr1v5tjjZapr; dilx=45r4vvlBBWr2foNDp2nwR
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:46 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/defined
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/defined
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/defined HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 724
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:48 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/defined
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/defined
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/defined HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1630
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; _gcl_au=1.1.617619934.1679785802
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:48 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.temu.com/link-app?originalUrl=&redirectUrl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&scheme=temu%3A%2F%2Fcom.einnovation.temu%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb
302 Found 0 B URL HTTP/2 www.temu.com/link-app?originalUrl=&redirectUrl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&scheme=temu%3A%2F%2Fcom.einnovation.temu%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /link-app?originalUrl=&redirectUrl=https%3A%2F%2Fwww.temu.com%2Fcash-tree-download.html%3F_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb%26page_url%3D%252Fsc_cash_tree.html%253Fsocial_src%253Dshare_copy%2526_bg_fs%253D1%2526_x_actv_sn%253D581969368230281280%2526_x_algo_sn%253De754834b2e19c68296ae20fe56e2e2e4%2526share_suin%253DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI&scheme=temu%3A%2F%2Fcom.einnovation.temu%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI%26_x_src%3Dsocial%26_x_campaign%3Ddaily_cash_tree%26_x_cid%3Dshare_copy%26_x_sid%3Dshare%26adg_dnld%3Dsocial_fb HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: Nginx
date: Sat, 25 Mar 2023 23:09:46 GMT
x-powered-by: Express
content-language: en
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
location: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
x-yak-request-id: 1679785786372-ea0b25ea791bc436256e442c077f93a5
strict-transport-security: max-age=2592000
set-cookie: region=211; Expires=Mon, 24-Apr-23 23:09:46 GMT; Path=/
language=en; Expires=Mon, 24-Apr-23 23:09:46 GMT; Path=/
currency=USD; Expires=Mon, 24-Apr-23 23:09:46 GMT; Path=/
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
vary: User-Agent
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
us.thtk.temu.com/c/th.gif
200 OK 0 B URL HTTP/2 us.thtk.temu.com/c/th.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /c/th.gif HTTP/1.1
Host: us.thtk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1064
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: image/gif
expires: Sat, 25 Mar 2023 23:09:46 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/a3
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /api/phantom/xg/pfb/a3 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-yak-request-id: 1679785787372-d406bf66a1726b19c4dd08ec2a14edbe
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787372|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/a4
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /api/phantom/xg/pfb/a4 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 2099
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/cash-tree-download.html?_x_actv_sn=581969368230281280&_x_algo_sn=e754834b2e19c68296ae20fe56e2e2e4&_x_src=social&_x_campaign=daily_cash_tree&_x_cid=share_copy&_x_sid=share&adg_dnld=social_fb&page_url=%2Fsc_cash_tree.html%3Fsocial_src%3Dshare_copy%26_bg_fs%3D1%26_x_actv_sn%3D581969368230281280%26_x_algo_sn%3De754834b2e19c68296ae20fe56e2e2e4%26share_suin%3DBD4EBVRHBVJWPDRQGBQRO6UCYZVVLAN5UWGZLLRPI4USI
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpmJnpCoXpdqn9_qkKxe6Mrb7TEGlSzXDziI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Sat, 25 Mar 2023 23:09:47 GMT
content-type: application/json;charset=UTF-8
set-cookie: _bee=vrH36ntUPj88BjviYUrxIVow0warFapV; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
njrpl=vrH36ntUPj88BjviYUrxIVow0warFapV; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
dilx=45r4vvlBBWr2foNDp2nwR; Max-Age=31536000; Expires=Sun, 24 Mar 2024 23:09:47 GMT; Path=/; Domain=.temu.com
content-encoding: gzip
x-yak-request-id: 1679785787468-d87139eeb02a351a18246de9d381e4d2
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679785787468|21
cip: 91.90.42.154
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/defined
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/defined
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/defined HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 615
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmxITGQffzknUgBj3dz6Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:09:48 GMT
content-type: application/octet-stream
expires: Sat, 25 Mar 2023 23:09:47 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
20.124.49.175
157.240.205.35
104.18.28.69
23.36.76.226
185.53.178.50
77.72.169.212