Overview

URLa.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547988?subID1=test_r565&affiliateID=75077&source=102bafe7c94c86d88a5648a8701297&subID2=55609&Target=Email&affsource=test_r565&bo=2753,2754,2755,2756
IP 18.192.108.151 (Germany)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-27 17:27:39 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.41.201.177
ocsp.pki.goog (3) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
a.vfgtg.com (1) 279695 No data No data 18.192.108.151
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-27 05:29:56 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
a.vfgtc.com (2) 0 2019-09-27 12:31:23 UTC 2019-09-27 12:31:23 UTC 18.192.108.151 Unknown ranking
a.vfgtf.com (1) 0 No data No data 18.192.108.151 Unknown ranking
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-27 05:29:57 UTC 34.117.237.239
cdn-dimi.akamaized.net (32) 0 No data No data 184.31.15.107 Domain (akamaized.net) ranked at: 280
jwbvdz.exceilentdate.com (2) 0 No data No data 63.32.216.166 Unknown ranking
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-11-27 05:34:18 UTC 142.250.74.10
t.anmdr.link (2) 0 2022-07-07 15:35:25 UTC 2022-11-27 08:54:43 UTC 54.230.111.50 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-27 2 jwbvdz.exceilentdate.com/ortb Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.192.108.151
Date UQ / IDS / BL URL IP
2023-02-07 08:07:17 +0000 0 - 2 - 0 prolleted-flogyprus.icu/50887581-dda2-4934-8b (...) 18.192.108.151
2023-02-07 06:59:34 +0000 0 - 6 - 0 myeasetrack.com/b46b2db3-b97e-43b5-a8c6-bc0e2 (...) 18.192.108.151
2023-02-07 04:11:33 +0000 1 - 0 - 10 track.supercosmo.xyz/208e8845-faab-44a0-a422- (...) 18.192.108.151
2023-02-06 11:56:33 +0000 0 - 6 - 0 myeasetrack.com/50f000a5-76b4-4811-9b65-34241 (...) 18.192.108.151
2023-02-06 08:02:24 +0000 0 - 0 - 4 track.supercosmo.xyz/68e71c41-9bd9-4106-afcd- (...) 18.192.108.151


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-02-07 08:56:09 +0000 0 - 2 - 0 app.rsign.org//SignDocument/Index?EM7KGynBr6m (...) 3.122.37.243
2023-02-07 08:43:43 +0000 0 - 0 - 0 ant-man-i-wasp-kvantumanija-2023-filmovi-onli (...) 52.215.192.133
2023-02-07 08:42:17 +0000 6 - 0 - 5 www.eservicebits.com/landingpages/d20bb990-c3 (...) 54.230.111.129
2023-02-07 08:42:08 +0000 0 - 0 - 1 dl.memuplay.com/download/assetbundle/rc.dll 54.230.111.43
2023-02-07 08:38:04 +0000 0 - 0 - 4 lgmartinmd.com/MS_INV_1046.7z 199.59.243.222


Last 5 reports on domain: vfgtg.com
Date UQ / IDS / BL URL IP
2023-02-04 10:36:39 +0000 0 - 1 - 0 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547 (...) 18.192.108.151
2023-01-30 20:52:10 +0000 0 - 1 - 0 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547 (...) 18.192.108.151
2023-01-29 05:58:12 +0000 0 - 1 - 0 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547 (...) 18.192.108.151
2023-01-28 18:29:50 +0000 0 - 1 - 0 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547 (...) 18.192.108.151
2023-01-28 14:17:53 +0000 0 - 1 - 0 a.vfgtg.com/bb7e836a-79d2-4d6a-adaf-2b9ae2547 (...) 18.192.108.151


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-29 13:28:27 +0000 0 - 0 - 1 t.anmdr.link/44542/8140/27889/?aff_sub4=_buck (...) 54.230.111.50
2022-11-29 04:32:11 +0000 0 - 0 - 1 jwbvdz.exceilentdate.com/?utm_source=1e3a4e53 (...) 63.32.216.166
2022-11-26 22:33:00 +0000 0 - 0 - 1 jwbvdz.exceilentdate.com/?utm_source=1e3a4e53 (...) 63.32.216.166
2022-11-26 22:14:02 +0000 0 - 0 - 1 a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52 (...) 18.192.108.151
2022-11-26 16:14:11 +0000 0 - 0 - 1 sl.sloffer.link/44542/3458/0/?aff_sub=2211261 (...) 54.230.111.123

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (64)


Request Response
                                        
                                            GET /bb7e836a-79d2-4d6a-adaf-2b9ae2547988?subID1=test_r565&affiliateID=75077&source=102bafe7c94c86d88a5648a8701297&subID2=55609&Target=Email&affsource=test_r565&bo=2753,2754,2755,2756 HTTP/1.1 
Host: a.vfgtg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         18.192.108.151
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 27 Nov 2022 17:27:28 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://a.vfgtc.com/cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=test_r565&affiliateID=75077&source=102bafe7c94c86d88a5648a8701297&subID2=55609&target=&Site=&Bnr=ALGO&cid=ws4vjnn08jdl29pk2d9aalh4&affsource=test_r565
Pragma: no-cache
Set-Cookie: bb7e836a-79d2-4d6a-adaf-2b9ae2547988-v4=K9oJOSV-wPLgrLuoGgg9a5uPv0XmWTV_r7cA_wQ91AU; Max-Age=86400; Expires=Mon, 28-Nov-2022 17:27:28 GMT; Domain=a.vfgtg.com; Path=/; HttpOnly cc-v4=Ff3wUph6zmwjiyAK8raOlocWqvvC4wX4ty21Yt8v0fTP3uUQCghSpJKd7D9esrWDtZYNmd4Vbdcoo6DpPmEKJtI3rQztyvBFxRQpgGQbySCxO2wm236SIAyeiDqEq5EL6eVJjHc9WVfIJft11eem2w%3D%3D; Max-Age=31536000; Expires=Mon, 27-Nov-2023 17:27:28 GMT; Domain=a.vfgtg.com; Path=/; HttpOnly

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9549
Expires: Sun, 27 Nov 2022 20:06:38 GMT
Date: Sun, 27 Nov 2022 17:27:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3955
Cache-Control: max-age=151779
Date: Sun, 27 Nov 2022 17:27:29 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:37:08 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 17:17:40 GMT
cache-control: public,max-age=3600
age: 589
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15166
Expires: Sun, 27 Nov 2022 21:40:15 GMT
Date: Sun, 27 Nov 2022 17:27:29 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ASRW9HCCZSradJTbRT/X/NmdW7jC5AdQLeRKlR3sPA3G0KVmndktr8KWuS7PXAJI07T4rnkzTfYf1yroQLvPwA==
x-amz-request-id: 5YV0FXC9Q9E3JTF8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 16:41:42 GMT
age: 2747
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /cb5cb9a8-26a4-42ae-946b-aae4b3e52909?subID1=test_r565&affiliateID=75077&source=102bafe7c94c86d88a5648a8701297&subID2=55609&target=&Site=&Bnr=ALGO&cid=ws4vjnn08jdl29pk2d9aalh4&affsource=test_r565 HTTP/1.1 
Host: a.vfgtc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         18.192.108.151
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:29 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.anmdr.link/75077/3785/26412/?aff_sub4=_bucket&aff_sub=test_r565&aff_sub2=55609&aff_sub3=wt63h33q5bd8p9pk2fro0p7i&source=102bafe7c94c86d88a5648a8701297&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756
pragma: no-cache
set-cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=mo_mXUeXu4obmHEnFCwd9Vf-0_LNglWEG2EM3UQA45I; Max-Age=86400; Expires=Mon, 28-Nov-2022 17:27:29 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None cc-v4=ny%2FouwFW1vNTG6xDqDPslzRmkqe5mBgN8VpX646Gbmp6zNQ240bQ6a10iUiPzgFReXYLluF53Qw08nWSGi9EwojLTANOCAldmuLLXJ%2BToy1mRFo38yfpRJEatRvGSbd8aDierflmfusftX4Sf6HNKg%3D%3D; Max-Age=31536000; Expires=Mon, 27-Nov-2023 17:27:29 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:29 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /75077/3785/26412/?aff_sub4=_bucket&aff_sub=test_r565&aff_sub2=55609&aff_sub3=wt63h33q5bd8p9pk2fro0p7i&source=102bafe7c94c86d88a5648a8701297&bnr=ALGO&target=emails&pyt=multi&bo=2753,2754,2755,2756 HTTP/1.1 
Host: t.anmdr.link
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         54.230.111.50
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
                                        
content-length: 1076
location: https://a.vfgtf.com/ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_r565%3B102bafe7c94c86d88a5648a8701297&affiliateID=44542&source=10242fefbc4bbbcab2d27f1653d2d9&subID2=75077&s2=10242fefbc4bbbcab2d27f1653d2d9&s3=test_r565%3B102bafe7c94c86d88a5648a8701297&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_r565&affsource=test_r565&aff_click_id=10242fefbc4bbbcab2d27f1653d2d9&affsource=102bafe7c94c86d88a5648a8701297&bo=2753%2C2754%2C2755%2C2756
server: nginx/1.19.0
date: Sun, 27 Nov 2022 17:27:29 GMT
set-cookie: aff_ran_url_3785=26412; Path=/; Expires=Mon, 28 Nov 2022 17:27:29 GMT; Secure enc_aff_session_3785=ENC0383507fb4b666c1e147497390763f3619c3a2def595f5e6de4de64d127e538190c07aa0ae42618f76d1b42e003cf34c576714982cd123d28f0092adb9b95a4eea6b49b4258cfcbdfac0ef591ec32579c55db324d9d922dd3c9fa70188e382fb685fe3ce6a584ed60f07ff589442436a4b2c152bfdecaf58e567956ec0ae4672c4f2966c72dbae976f205f3fcce49579b2d90871cbca8e3a312f2a9d0c5951cfbed1c66605d3f84e69daa41e4a7e374a20aba44467ad925d9e80720ab33d540a5311c7db72; Path=/; Expires=Tue, 26 Nov 2024 17:27:29 GMT; Secure ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Wed, 22 Oct 2025 04:07:29 GMT; Secure
tracking_id: 10242fefbc4bbbcab2d27f1653d2d9
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0whAnDr9AHJOCyfrn4UjWGI1Ur_lNqUcOUYA9sd9OWzGf562Q2Ppiw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1076), with no line terminators
Size:   1076
Md5:    fe415496477e75bd0bcbda02cb2eb5c0
Sha1:   a265fad7784935e87b452986e43fef25367258ba
Sha256: 3d7e181063eda6752a088c5c032134f86bc362203163411025068af96ef4e164
                                        
                                            GET /ab267e05-23a0-430a-bac4-772f7f629740?subID1=test_r565%3B102bafe7c94c86d88a5648a8701297&affiliateID=44542&source=10242fefbc4bbbcab2d27f1653d2d9&subID2=75077&s2=10242fefbc4bbbcab2d27f1653d2d9&s3=test_r565%3B102bafe7c94c86d88a5648a8701297&s4=75077&Bnr=ALGO&url=1&target=emails&pyt=multi&affsub=test_r565&affsource=test_r565&aff_click_id=10242fefbc4bbbcab2d27f1653d2d9&affsource=102bafe7c94c86d88a5648a8701297&bo=2753%2C2754%2C2755%2C2756 HTTP/1.1 
Host: a.vfgtf.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         18.192.108.151
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:29 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://a.vfgtc.com/2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_r565%3B102bafe7c94c86d88a5648a8701297&affiliateID=170910&source=10242fefbc4bbbcab2d27f1653d2d9&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wp212152emgoq9pkibl5642i&affsource=test_r565
pragma: no-cache
set-cookie: ab267e05-23a0-430a-bac4-772f7f629740-v4=DdIxkDWl0mY_4faMd2mhw4BxHVwR9lyBBzNHTuRpym8; Max-Age=86400; Expires=Mon, 28-Nov-2022 17:27:29 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None cc-v4=Q5HFsUZna24tLswXN42GG8lY61WKkecWhXWYIaOhWDx%2Ba1FzV5jtYtP7xZ7hyU%2FGiZ10%2BT9ALy0g90%2B3xsqXg0F3nT8KsF6UbqctPbl4ESS20u277KT5SAsEl%2B2R5TIC19n2IVnCB09cGyECzI7Jxw%3D%3D; Max-Age=31536000; Expires=Mon, 27-Nov-2023 17:27:29 GMT; Domain=a.vfgtf.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /2d2fb929-79a5-4a1c-840d-3f370da182b6?aff_sub4=_bucket&subID1=test_r565%3B102bafe7c94c86d88a5648a8701297&affiliateID=170910&source=10242fefbc4bbbcab2d27f1653d2d9&subID2=75077&target=emails&Site=&Bnr=ALGO&cid=wp212152emgoq9pkibl5642i&affsource=test_r565 HTTP/1.1 
Host: a.vfgtc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: cb5cb9a8-26a4-42ae-946b-aae4b3e52909-v4=mo_mXUeXu4obmHEnFCwd9Vf-0_LNglWEG2EM3UQA45I; cc-v4=ny%2FouwFW1vNTG6xDqDPslzRmkqe5mBgN8VpX646Gbmp6zNQ240bQ6a10iUiPzgFReXYLluF53Qw08nWSGi9EwojLTANOCAldmuLLXJ%2BToy1mRFo38yfpRJEatRvGSbd8aDierflmfusftX4Sf6HNKg%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         18.192.108.151
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:29 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.anmdr.link/170910/3458/0/?aff_sub4=ALGO_bucket&aff_sub=test_r565%3B102bafe7c94c86d88a5648a8701297&aff_sub2=75077&aff_sub3=wt63h33q5bd8p9pkipbe4afu&source=10242fefbc4bbbcab2d27f1653d2d9&aff_sub5=_test_r565
pragma: no-cache
set-cookie: 2d2fb929-79a5-4a1c-840d-3f370da182b6-v4=GKbHMJjyml3822-LhS16Ga29DneCIutaK4MO279QAjg; Max-Age=86400; Expires=Mon, 28-Nov-2022 17:27:29 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None cc-v4=iJlaJFsCPGdOZVKluVYUaqkKruFB4y8SK71YY4zrQISIqzsacA%2BWi33Vc2yVwk90b2498qHR0L5%2Bdgl%2FeBMJygWMCUgqDjIdIQ4ky89MUeoQ27xxhmtYFGLVYl%2Bw4NCHN0iKZiyg50oLhqx1o6Ycsw%3D%3D; Max-Age=31536000; Expires=Mon, 27-Nov-2023 17:27:29 GMT; Domain=a.vfgtc.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 17:08:54 GMT
cache-control: public,max-age=3600
age: 1115
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1939
Cache-Control: 'max-age=158059'
Date: Sun, 27 Nov 2022 17:27:29 GMT
Last-Modified: Sun, 27 Nov 2022 16:55:10 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /170910/3458/0/?aff_sub4=ALGO_bucket&aff_sub=test_r565%3B102bafe7c94c86d88a5648a8701297&aff_sub2=75077&aff_sub3=wt63h33q5bd8p9pkipbe4afu&source=10242fefbc4bbbcab2d27f1653d2d9&aff_sub5=_test_r565 HTTP/1.1 
Host: t.anmdr.link
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff_ran_url_3785=26412; enc_aff_session_3785=ENC0383507fb4b666c1e147497390763f3619c3a2def595f5e6de4de64d127e538190c07aa0ae42618f76d1b42e003cf34c576714982cd123d28f0092adb9b95a4eea6b49b4258cfcbdfac0ef591ec32579c55db324d9d922dd3c9fa70188e382fb685fe3ce6a584ed60f07ff589442436a4b2c152bfdecaf58e567956ec0ae4672c4f2966c72dbae976f205f3fcce49579b2d90871cbca8e3a312f2a9d0c5951cfbed1c66605d3f84e69daa41e4a7e374a20aba44467ad925d9e80720ab33d540a5311c7db72; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         54.230.111.50
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
                                        
content-length: 460
location: https://jwbvdz.exceilentdate.com?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_test_r565&click_id=102423a9fa21412258c6568801aaa2&j1=1&j5=1&j8=1&j9=1
server: nginx/1.19.0
date: Sun, 27 Nov 2022 17:27:29 GMT
set-cookie: enc_aff_session_3458=ENC0399aeff77a70c5b8011127d10515733acffb61deda09fcce636aafec46a2fb30867a4c7ec542ffa8ecef980acd9a0eff81cab9a0c8aa25bfc7f29a6449698f4cbc7ef6db0bad26459b09f7d9c06797644ac9db9703d80db4a3cb6cefe43e1a785bc5e0576e448227789ec4e357356e37d3f428579c625417d1a0b6240cdec01abfb92b94da38bd783b6aae04b281024dc92c45a192d765f285df3bc7bddc9699eb2e7eae0fa7e80e64acf491b9bad34025f4193be97e596f62383e7e33176e96fde06ac39b2bd39b7a8a17afa01f9cbb9e6e8f85f810866f5004d4cb8340ded101322d20d; Path=/; Expires=Tue, 26 Nov 2024 17:27:29 GMT; Secure ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Wed, 22 Oct 2025 04:07:29 GMT; Secure
tracking_id: 102423a9fa21412258c6568801aaa2
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s-7GcnIubj4H6fFyC7nvSPZ9_2_IBrbhcBDWxkT9gsbZbDUBtre6NQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (460), with no line terminators
Size:   460
Md5:    68ec0fb10d62c8e7a894b9e41e1123da
Sha1:   1594f25f1522146edd197357140112126b2bde9c
Sha256: 80176257847c3e510649102a9a4d98d71a5dd56658b544dd681a00d091cc8a97
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F187A520757FE4A0D2B8E9B8CFE97F876E3DBD321A0E9EEA01FED9A4D54BB1FA"
Last-Modified: Sun, 27 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10601
Expires: Sun, 27 Nov 2022 20:24:11 GMT
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: htKS+z5cyby4W4IsA/glyA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.41.201.177
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: j3vHg4bijknWScVuv1CG3sZoJzQ=

                                        
                                            GET /landings/277133/1669380217/css/style.css?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: 3+DIgsljcYSbjRUc4e/XbGdSCQdpDKkh1LXT2xn+aGiHBoVPldVJppSR6locIqar/Lp43d8KtAE=
x-amz-request-id: SBY8DPT0DJ91W675
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "8aea4d63bdd0459568ef25ccdada2732"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 2677
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text
Size:   2677
Md5:    2cdf96939817c669c6e1488f480df0ec
Sha1:   e05a5e6cfdceb4252e5f3a3db5f59463a24d4fc5
Sha256: 1303cfd8d4debab2cd83ddbc988f357c18eb5bc1b68081db726460559cb32fd0
                                        
                                            GET /landings/277133/1669380217/css/popup.css?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: /hXj4K4KCAsA2o1rAJuZs/VweTg6dBpNjo/NuvhKNt0RdBhQfbPSEi3DozkQkJGIM4EXSBqNtBs=
x-amz-request-id: SBY48ATGHCN0MQH2
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "8a876cdb790f9d5309812f3655502d26"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 638
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   638
Md5:    022e4069739fdcff450b70f51d797042
Sha1:   77454d10095021822fe0c7dbcd0087d221cdd517
Sha256: 2c8feafab8ab925a45b46d96f13dd9c36b1d8eec4a04751db4a869701d212a47
                                        
                                            GET /landings/277133/1669380217/js/translates.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: hUNZhfUfy3GiwiVaWI1FhRIaWSexKO87j4MTDlvmdn6X38OmgOni2Us1EUqzy3c/FhIEDUGDeoQ=
x-amz-request-id: SBY0E3M1MXF26H8X
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "6324d6d9c30698e2157f74377a990e7c"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 29254
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   29254
Md5:    5bd51fb068efaa9ec931be840659a801
Sha1:   751b54ed9c0b57d8a390962357ca91223b49a931
Sha256: e509ead61b32171bc167f5a6a19b7d6b227524c4d63b45d115cabd99f4de6b67
                                        
                                            GET /landings/277133/1669380217/css/reviews.css?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: yKdrrlhNq+EDcBZHTM6CRgY4N+ZTueSjlSIwKwva4A+wU3Qw8qRFw+rJJp1DDyZjxTMCxiAUdiM=
x-amz-request-id: SBY8T2PZ7DFMQH83
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "99df618b8525999775d431eeb4861b43"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 968
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text
Size:   968
Md5:    dc81bfa971a2e79077ceb30ac37c5803
Sha1:   cb1ee4e2f8b392d73c9d00a3f0ed8d7a2b84f54e
Sha256: 57dc9cac90e14fda3fee644807a15b8da0ad2a82dd6d86685314f16345c9e182
                                        
                                            GET /landings/277133/1669380217/css/timer.css?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: W2OLyyqGZMZbnL8GF0yJ26aQhvryC0SWVgxSxmBCN4t0eOEyrrsD645mHwjjvz21lJrnTlykoqI=
x-amz-request-id: SBY38MSJNF4BA1RR
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "b58093534f4606cd14ecc2481c251378"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 706
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text
Size:   706
Md5:    a019fbb5e8c12324c3207c1b2decbd95
Sha1:   e23662f5c55e39161b258f28f0b3fbff39f9fd05
Sha256: e748e7ac339382dadedab9e851d166b3731c52a69e71e0fcb551e9ad66795294
                                        
                                            GET /landings/277133/1669380217/js/jquery.validate.min.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: hNdUwUvyeDIm4z3OzNILm10NfBtVXnjd/d+z+HGmQoTw1YZMt5QtXUIqDYAUaO/YEZElcE+VpUE=
x-amz-request-id: SBY5ND9SB00J1G94
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "23d73c6bd6cbea8f06d0cc227896a827"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 7815
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (24228)
Size:   7815
Md5:    f808399407c6ac496fe830d5deacb05f
Sha1:   151039ee8631ce8ff989c5cf795c2feba950a499
Sha256: 21e11160c5ba11e65a1c97b0306a9f5dec06c8fd3d4a7d69dd0a80e263577958
                                        
                                            GET /landings/277133/1669380217/js/jquery-2.2.4.min.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: Uaj9JrX0+H5UAHkQw6kAv/9xhxu7MiCJiPF9ga2EGEMQQNzLHOFflAIGnziucI3bxTOsIFGm4AE=
x-amz-request-id: SBY096DVSD7KZF15
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "2f6b11a7e914718e0290410e85366fe9"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 29855
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (32065)
Size:   29855
Md5:    2fa28552f1ee4e1382ee43930b53afb8
Sha1:   803670da6a35378bf4eb73acc8e72fe4feb5ca30
Sha256: ecfddf7d1e798dd2778c071bea24c70b650ef990fc09793fce25f2f094b35494
                                        
                                            GET /landings/277133/1669380217/js/title_tanslate.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: E5L5F4ktmsr7DWu00n4sQyvIssaI2NwIUiH0xj/LwHHEwGgpDSOnkI1Eip8de0OkdreuIbqc9Ec=
x-amz-request-id: SBY465R6BJE0X3SR
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "5f373fa5bf21c44b9ad23b70ef96e73d"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 1298
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   1298
Md5:    0e212ad4454c941c45c2e57df42c2b4f
Sha1:   fe9d7c484c2c0d7a6475692ef984c53a06c95406
Sha256: e950a9e5e696f39d02028b27a4cd82fab1b6fd07fa34a238d3a3f7f5e90d95c3
                                        
                                            GET /landings/277133/1669380217/js/translates-review.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: TW62AXl45Ew+jUvGlfkUK/MP7H9FLFcJNxEUvHTw15oxEz28f5dtPcMsHDiCeqgvTP6eAjbTRqs=
x-amz-request-id: SBY7KBN8TPNN4PMR
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "1933dcd305e29148845fdd372197ee4a"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 14048
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   14048
Md5:    9c292591c0532df07caa6a0a0c00065b
Sha1:   f998699809120f0c21d7333f4850822b4d84d2a5
Sha256: c46389b9213c4e1ce9789b380a319496fff7b7c04b15ab4235bd438cf99bdcbe
                                        
                                            GET /landings/277133/1669380217/js/timer.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: NgjZg+jyy6kKD/8JHSTTwBAlodZkyj7aEceXasvGEISk6YdB+2tB0wYJOx+vD0zUCTlACXtTrhA=
x-amz-request-id: SBY3W5225KREZDKM
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "3350ef7fbc19030e06999dbb12a2c9b0"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 903
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   903
Md5:    24af8e8209962d30b5e6bb428d28489c
Sha1:   a00033869880cf83bc81fde7874242d838b59e34
Sha256: 52fe1029652b5a0576cdae96e8278900eb7eee3f81a1ae66ea88129aa6f3f924
                                        
                                            GET /landings/277133/1669380217/js/translate-popup-timer.js?1669380217 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: QIHWlHtuhpDoVxV+g8ITA2rX6oUveyq876ce6EE9XlpwHmHcZ5B4zkTj1r4S3+TS/Mh/xV699Fc=
x-amz-request-id: SBY8H4CHHCW1M1MN
Last-Modified: Fri, 25 Nov 2022 12:43:42 GMT
ETag: "e87a84612ebce6b2a84f41ef7f6d40b0"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Length: 1080
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   1080
Md5:    b8caed488bbb08c2414fb1c79c9c8d35
Sha1:   8bda431010a9d7666cd6c2c15f9a3b7f81634ed8
Sha256: d72877ab0432583bfed248050bf32ad260c7b06c4e20a714d07ee65e7948ee0c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 27 Nov 2022 17:27:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 27 Nov 2022 17:27:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /landings/277133/1669380217/images/unlock.svg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: Qv2zHgY9ZJ0iEeB8XNhSpmOcGGXZKcmwCLbQBtA8q4OEEppcNbq9X6Si8k3nkEhBNnet9gM3yjo=
x-amz-request-id: JQ9NZHE88ESAK6YV
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "a732e1e06affb4575c050fdb0131e5ca"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2378
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (944)
Size:   2378
Md5:    a732e1e06affb4575c050fdb0131e5ca
Sha1:   da4f4f204a4d22c7424274a91520e0ea993c48c7
Sha256: e17f481e5fe197e600ffe6cf53a94a4e49a73b6b817ff560cd92c3dd501d603f
                                        
                                            GET /landings/277133/1669380217/images/7-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: 6BOsp3gBpU/ic2QS8HHWs+qCpr13OurSfsa2cKcRxtQmmDfgv26qJdS0Bu/zSdld1YCwcZoLWVw=
x-amz-request-id: HM1D0KKY91D11JKP
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "8155d8ecc7dc2d9b29cf99ab85c3d2a8"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2282
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   2282
Md5:    8155d8ecc7dc2d9b29cf99ab85c3d2a8
Sha1:   ba784563c7787760b318af24ea274ad6df2c5b89
Sha256: 7e368b2c331e65b43d9e6977dde473b4ee4ed25f0253e0d086ca676438b97d27
                                        
                                            GET /landings/277133/1669380217/images/shield.svg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: 4uCWwgOGuw8jqXACRq92z6gc8R9O1fg+G8VvUgHr4Tw57ZKpti/VUHaUvOgp+Ozj8Pi4hxSXLwk=
x-amz-request-id: JQ9ZGHBGPCS94T99
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "0c7a0dfd64cf020cd8a6dc0c3df1dbdf"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1539
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (310)
Size:   1539
Md5:    0c7a0dfd64cf020cd8a6dc0c3df1dbdf
Sha1:   f705635388aebebae1223d828c38233067f28ab1
Sha256: 856fdb53067254df9495660a355e5ed91936803b567867f1053ce5fb97107888
                                        
                                            GET /landings/277133/1669380217/images/shutterstock_497382763_w.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: 0+XxW+9/SVQdXgVWRjrYi+OdUJVeHahxgM7ARwlCmrfuF2vOegZWkSVeIqo+d5iCQ42geZpy1D4=
x-amz-request-id: JQ9MS1NY0W3Q3ZE0
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "7672ac6ce009272cfbc099be80718fea"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 18302
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 986 x 475, 4-bit colormap, non-interlaced\012- data
Size:   18302
Md5:    7672ac6ce009272cfbc099be80718fea
Sha1:   fe1e0300c9d16a3dda61df3780af6e24c8c10ffd
Sha256: 53f048cacd290d3fa1b6d80c3b2d40d16adca813667151cf2d38a487e2ebe99e
                                        
                                            GET /landings/277133/1669380217/images/1-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: BCOTqYS0FOKVTqVHaeEzxQvHG2gJxtMFkIVIcEVD5e+v5lL1lp6rIAW91Z/RxkdlREzrk1bToR4=
x-amz-request-id: HM1CDY30DG3Q6MNR
Last-Modified: Fri, 25 Nov 2022 12:43:39 GMT
ETag: "6e6d0b84c81d847e24671a711115a781"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4292
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   4292
Md5:    6e6d0b84c81d847e24671a711115a781
Sha1:   20dc2d359e437dc10ceefea4d3c7b5189c2e58d0
Sha256: 515974c9245ead07b3332ca22fa1581622118c75955941452140a602646aa553
                                        
                                            GET /landings/277133/1669380217/images/password.svg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: StXGiO8jGQaYrQ/5Pc4HLuRic5OLHIpG4/1Ig8wCGYj2UQ/Qaaosqpkzp13E9EXbkc/zd1tGkcY=
x-amz-request-id: JQ9Z27EGYJJYBTJ6
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "f42aef7f97d4c9bdb074673081f38ac7"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1339
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (330)
Size:   1339
Md5:    f42aef7f97d4c9bdb074673081f38ac7
Sha1:   0231df782e371d139c826e091279acd9a07e691c
Sha256: 5fca7f589cd825e1f152e0a1677d6cbd0a3ee3ecde05905d572af87e8b453eac
                                        
                                            GET /landings/277133/1669380217/images/2-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: I0J9FlDAHPlx1PJE3UAz5UZnFJ+mp8mIRYbF7mcWFyYUuwzuDVJQMrq6MrBJyMnU5qZUY7NCXNg=
x-amz-request-id: HM1BXH35SR8JCWHC
Last-Modified: Fri, 25 Nov 2022 12:43:39 GMT
ETag: "66b6dc51bd19c799dcadf1dbeb628d9c"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2009
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   2009
Md5:    66b6dc51bd19c799dcadf1dbeb628d9c
Sha1:   ff7fe6049e944186764bfc5041d624ec11f8d362
Sha256: d3c1502509ae60909fe60c46cc58c41c1a9fe53ee7aeffb92d37a074ba8550f0
                                        
                                            GET /landings/277133/1669380217/images/110010_3.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: oX+TxogkMAH0JtF7X3G2X8YPQQXfXCP8YeEao8iJTfeBGiiXtncYnVcoCD7vTKNSWyedK++L0fg=
x-amz-request-id: JQ9QJZN6S589CG66
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "1cda15cc6238bfbf394087f9e4240c08"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 41178
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 682x388, components 3\012- data
Size:   41178
Md5:    1cda15cc6238bfbf394087f9e4240c08
Sha1:   d04d25fae912c5c660bfb855b0463e7cfffdc52e
Sha256: 2fccdea801925553b007bf3f67a8a59715589ab98796dbeebe84bb40a8a77ac4
                                        
                                            GET /landings/277133/1669380217/images/3-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: d12hLO5Q9xgQxyersOq4wRWpELohfujjV5EDdmh8tXx0QCSbmwxDa7JykqfcWaqZC2O8+Px4n+g=
x-amz-request-id: JQ9RC1SSP9YCE7GP
Last-Modified: Fri, 25 Nov 2022 12:43:39 GMT
ETag: "1dc512dcb0850f22cfa72c789578085c"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3946
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 80x80, components 3\012- data
Size:   3946
Md5:    1dc512dcb0850f22cfa72c789578085c
Sha1:   933e9c5648e782c9f9a1504d2248f0acb4b9950b
Sha256: 7a27ad3bbf259cc02f80f496c19e6033d958362c1b5075c1957bb502f2666d00
                                        
                                            GET /landings/277133/1669380217/images/5-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: r2G6CE+hNf/cLBZfFlxA2l7t9E7Y2cidVNyNLQn29kyRrxyEGmXHGT/j841qKZZkF4fZIctw1m8=
x-amz-request-id: HM1D45QQ0ZKXTFK9
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "27109a247208262e6293950ca8f5450d"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2879
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   2879
Md5:    27109a247208262e6293950ca8f5450d
Sha1:   cea89616d15ad45a0f2b04082dff608abd96b800
Sha256: 86755df878f9f09c1b06deb1ac049db77b1931d3b0f650548fac960b3fedaa96
                                        
                                            GET /landings/277133/1669380217/images/6-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: fPoDIQsw0AAIQLiZFBwKwZlac/wPqXpc+ylDJOjtFzvvJcqFudeO3uned4yz/Z/F5RPMH0MAItQ=
x-amz-request-id: HM1DEQ69B6P5E5BN
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "9a6870069cb979e16b239f9ed485fb3c"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3256
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   3256
Md5:    9a6870069cb979e16b239f9ed485fb3c
Sha1:   c1dc7f3620c8cc391648c550f91b269b04d3c612
Sha256: 3e280ac6e0be5142f62957076a5c99e792eb61533e23f33b165aea4d522de818
                                        
                                            GET /landings/277133/1669380217/images/4-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: wSTNtSSOw8M9KmCMCdPTTUO2bir8jKxX9K6gBxnxjj0y2Weg2a3Y2eK2QJbRWawqDUTEMa9dsW8=
x-amz-request-id: HM1B5YMWZ94MJ34P
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "cb3aff7c886e4f72a98172b873b5e62d"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2586
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   2586
Md5:    cb3aff7c886e4f72a98172b873b5e62d
Sha1:   33de244dcb4db4abe54b6508ae8d1546eb279aa5
Sha256: d22825c9a1ff2c18506f0c2c3abaf3bb77f8352ba7bd410d50d35f20adbab08e
                                        
                                            GET /landings/277133/1669380217/images/blocked-icon.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: eOM5dZ0oOyDB3HWt7F9ynI/uAHaIdMtN07k9O2w7/UMLTwgFNZ3IEw7MM4E3atDnX5OAAXUS15g=
x-amz-request-id: HM1A1JQZQFBMNZDH
Last-Modified: Fri, 25 Nov 2022 12:43:39 GMT
ETag: "87487ad255dde0624f59abb85602defc"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 502
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 23 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   502
Md5:    87487ad255dde0624f59abb85602defc
Sha1:   caafad17df41875bed690353ead6cc495a9bf8c2
Sha256: f7a4b3fb74b9e06f243f23ede51a801a0aa3fa2c0040bc44a49a97444780923d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 27 Nov 2022 17:27:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /landings/277133/1669380217/images/icon-city.svg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: pQ1qFN8kbisn1Eob43zq6lITifwGtS5iH9AHV2hHXJSoz7OfcSlW+XKdNm4GbSAsFNmfzMaPrOA=
x-amz-request-id: JQ9H4JRK4QGPKQ05
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "cd4eb61df231131a053d0a4e680d22fa"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 839
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (735)
Size:   839
Md5:    cd4eb61df231131a053d0a4e680d22fa
Sha1:   ca5b873e0f24fb900b2740048506b7ab322a44fa
Sha256: d71e36a5403717ee163d4dfe676d92b5cf91a20b5112e0c8441fb891673ca6d5
                                        
                                            GET /landings/277133/1669380217/images/8-eu.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: dwDBlVhg5aDB4N/9FHLEtB3NinDktB8D4xSfa570sr+Js2FI0QGp4mBlRG6O1P5tHLxE15Q+qx8=
x-amz-request-id: HM12E6Q4ZVF17BG1
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "41bbda91cef3f22db1d45d66f7ca0961"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2458
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3\012- data
Size:   2458
Md5:    41bbda91cef3f22db1d45d66f7ca0961
Sha1:   e2f8f56674e0180063a4f8287931dc0b273baf8e
Sha256: d0f8fe31f17be4afd352a60628de61eef59ee08ac0ecddac9cfe4e4a504f4f0e
                                        
                                            GET /landings/277133/1669380217/images/49.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/landings/277133/1669380217/css/style.css?1669380217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: NJv2Mh+S9va+DatnKASC+VTtJLwgdcYlwHPsXPmI3JhxMKOF9x/ucfKdfgJ+Szhhen8JHTaOUeA=
x-amz-request-id: JQ9SHCN1XSN0VWZH
Last-Modified: Fri, 25 Nov 2022 12:43:39 GMT
ETag: "372e58a66b7d92e1dd903f32fb308d1e"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4510
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 336 x 336, 8-bit/color RGB, non-interlaced\012- data
Size:   4510
Md5:    372e58a66b7d92e1dd903f32fb308d1e
Sha1:   40be5d7067b822dfed07e173acd11cfceaa9e329
Sha256: 82408edfa51c2d831b86658b6637a6950986c342195aa08fd1467ea1d71b9793
                                        
                                            GET /landings/277133/1669380217/images/action_icons_20px_2x.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/landings/277133/1669380217/css/reviews.css?1669380217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: z8rx2WU4WLclosejKO66xvOMUoOoEr1tETTR9FjxcJ2KC7xzzClf5m6a9nUr/RFwwT6kUTWSgqs=
x-amz-request-id: JQ9H2229V2CJSRJB
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "b699975b5fe73b087e711a33ff24ee1e"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1726
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Size:   1726
Md5:    b699975b5fe73b087e711a33ff24ee1e
Sha1:   0e33cc5c32a5e7d18440751e3946076664caaf53
Sha256: 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
                                        
                                            GET /landings/277133/1669380217/images/shutterstock_1549109471_web_w.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/landings/277133/1669380217/css/style.css?1669380217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: U8s/KJgA3EAS854FDNRwOdvNltnw6ppLHlWArXMtiTM6OdfaYA+pKB418OlX/Lt8wkemt1WT1+I=
x-amz-request-id: JQ9S9Z7GRRZBCSH1
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "94e08bf0e1ba6c7b863d84f0fe8d1052"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 87114
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 1920 x 1080, 4-bit colormap, non-interlaced\012- data
Size:   87114
Md5:    94e08bf0e1ba6c7b863d84f0fe8d1052
Sha1:   968b61a83e3beeb6acf55f2679a7ccd5b6c8b5c0
Sha256: db5fd51b01facb3e563fadb03487b7adffa79afd80aacd64b5689eedfb465dc3
                                        
                                            GET /landings/277133/1669380217/images/shutterstock_1793511010_web.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/landings/277133/1669380217/css/reviews.css?1669380217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: lpFZFGlqiPf7gF/kDKtZ8NdXDhrhOhYA7uAjbYTZBhnPKiD6c/SIDwiC43BYy77JQVvlnphZDPY=
x-amz-request-id: JQ9GECQD5NKCJPRR
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "93565bbdd97a0ac973e6210874f0aead"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 99926
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size:   99926
Md5:    93565bbdd97a0ac973e6210874f0aead
Sha1:   96e1783a48957c52db5613f7377a057ba76cb76d
Sha256: 7abeb6ccc056601140194182c8f9c0c063983bd47d019f7d281ce3aeed36aeef
                                        
                                            GET /landings/277133/1669380217/images/favicon.png?t=20221127172730 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: s+0A0sgagL8ja9ZNP64dlLSFt7ZiyBRK8vN8m9N5s2pr1spdNC4iuz5Ne4x7sZgCif2eiyIFbJ8=
x-amz-request-id: 6RT6WFG1PKVE18KH
Last-Modified: Fri, 25 Nov 2022 12:43:41 GMT
ETag: "40a54c3ecf143b64096b063ff793fdbb"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4093
Date: Sun, 27 Nov 2022 17:27:30 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   4093
Md5:    40a54c3ecf143b64096b063ff793fdbb
Sha1:   017eafffc5e55226a2aec0dd3c03f1b6130a6bab
Sha256: 39b439471019cb16f819e05166d23492593310fd55cce8471062d8f2dc5de423
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12582
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:27:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12582
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:27:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12582
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:27:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12582
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 17:27:31 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4374
x-amzn-requestid: 16fa9401-4b57-4300-9377-3a7d96de3a38
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGB7uFWJIAMFfTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f16b1-3386c7b54d828c3b1393b9ce;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:01:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6XMNeYqDwM9yHZf1rkBRhZ6k_iZE92MWKavu0vlQnT2jZ--tswQwWw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 07:07:11 GMT
age: 37220
etag: "4770f56d4d9489df43f33952e4bfa84d8e46414e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4374
Md5:    514b4077fad50ba782e4bbb2c95c6852
Sha1:   4770f56d4d9489df43f33952e4bfa84d8e46414e
Sha256: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
age: 71117
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10199
Md5:    2cd887044e91d7ed0f1a8d7119ff7dd0
Sha1:   ae8aa4ce6ddaccba771fe65446926b60fc5628da
Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
age: 71117
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4803
Md5:    cc0a257323f882caff067adb86d906e4
Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc
Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
age: 71117
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7380
Md5:    76c00eceed956377d7469ef58b0815cb
Sha1:   97a135335f5b1b042adeb385718f8808cb78528b
Sha256: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
                                        
                                            GET /?utm_source=1e3a4e532f1c7040&s1=120749&s2=1506505&s3=170910&s5=75077_test_r565&click_id=102423a9fa21412258c6568801aaa2&j1=1&j5=1&j8=1&j9=1 HTTP/1.1 
Host: jwbvdz.exceilentdate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         63.32.216.166
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:30 GMT
set-cookie: unique_id=638387600004896b; Path=/; Expires=Thu, 26 Jan 2023 17:27:30 GMT; Secure; SameSite=None unique_id2=6383876000062aff; Path=/; Expires=Sat, 25 Feb 2023 17:27:30 GMT; Secure; SameSite=None 6383876000062aff_c=1; Path=/; Expires=Sat, 25 Feb 2023 17:27:30 GMT; Secure; SameSite=None ref_token=152840_120341_120749; Path=/; Expires=Tue, 27 Dec 2022 17:27:30 GMT; Secure; SameSite=None impression=; Path=/; Expires=Sun, 27 Nov 2022 17:27:30 GMT; Secure; SameSite=None 6383876000062aff_sl=[277133]; Path=/; Expires=Sun, 11 Dec 2022 17:27:30 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   20600
Md5:    1f825f06ee469d431c6546da130f681c
Sha1:   13aeaf978a4736a46f60ad429c23226dcd2acbf2
Sha256: 682f3c88b9986d91ea5c96d3ccd0fd1aec80656b05b18f7843fc567256707d26
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
age: 71117
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5099
Md5:    433875a1b1fef34e45f2d8ac344c07e3
Sha1:   f2129466436cbbdd58abe42a47fb7af19eba58e6
Sha256: ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
                                        
                                            POST /ortb HTTP/1.1 
Host: jwbvdz.exceilentdate.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 295
Origin: https://jwbvdz.exceilentdate.com
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/?s1=120749&s2=1506505&s3=170910&s5=backuser&click_id=102423a9fa21412258c6568801aaa2&iexpp=1&j1=1&j5=1&j9=1&utm_source=1e3a4e532f1c7040&j8=1
Cookie: unique_id=638387600004896b; unique_id2=6383876000062aff; 6383876000062aff_c=1; ref_token=152840_120341_120749; 6383876000062aff_sl=[277133]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         63.32.216.166
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sun, 27 Nov 2022 17:27:32 GMT
content-length: 13
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   13
Md5:    1031bf08481e45e42ceb3fd978c3d379
Sha1:   3d6d43df4c45f09f5d68593646fd83352323a5ea
Sha256: c99e0e70ba976626855bf7f83fc0e333b57833bcaf3dcfba16215a6e4fa3e208

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /css2?family=Alfa+Slab+One&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 17:27:30 GMT
date: Sun, 27 Nov 2022 17:27:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css2?family=Ubuntu:wght@400;700&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 17:27:30 GMT
date: Sun, 27 Nov 2022 17:27:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /landings/277133/1669380217/images/1.mp4 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://jwbvdz.exceilentdate.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         184.31.15.107
HTTP/1.1 206 Partial Content
Content-Type: video/mp4
                                        
x-amz-id-2: NGMKHpScwLcX36R9NgQCg1pNM9u3PD0ybPGU6wf3lt9bkDf2y93zhPM/LAHmJpjT61GAPd8FIgU=
x-amz-request-id: JQ9SQJZ18RHH9NAC
Last-Modified: Fri, 25 Nov 2022 12:43:40 GMT
ETag: "9da1ec568a44f92b56f3d1e3c10da6a4"
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 27 Nov 2022 17:27:30 GMT
Content-Range: bytes 0-2971964/2971965
Content-Length: 2971965
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---